Georges Khawaja

Georges leads large-scale, technology-enabled GRC transformation programs for complex and regulated organizations, from strategy and roadmap development through implementation and adoption. His experience spans integrated risk management, cybersecurity and regulatory compliance, third-party risk, privacy, business continuity and operational resilience, and control transformation.

He helps clients establish scalable governance and data models, redesign risk and control processes, and use technology and automation to improve efficiency, transparency, and consistency across the enterprise. He also focuses on advancing the use of generative and agentic AI in GRC, including applications in policy and risk intelligence, control testing, evidence collection, issue triage, and other high-value risk processes.

Prior to joining Deloitte, He held leadership roles across GRC technology, ServiceNow, and client services, including at PwC. He holds an MBA from the University of South Carolina and a bachelor’s degree in mechanical engineering from Clemson University. He is a Certified Information Security Manager (CISM), a Project Management Professional (PMP), and holds multiple ServiceNow certifications, including Risk and Compliance, Third-Party Risk Management, and Vulnerability Response.