Scott M. Gallant

AI Governance & Strategy Practice Leader · Privacy, Risk & Security · Digital Transformation

Greater Boston, MA (relocate, 50% travel ok) · reveal phone · reveal email · scottgallant.com · linkedin.com/in/scottgallant

SUMMARY

AI and data executive with 25 years leading modernization where strategy, governance, and delivery meet. Shaped by enterprise, government, nonprofit, and startup work alike. Most recently ran the AI practice inside Perficient's AI & Data Platforms service line: defined its offerings and points of view, led pursuits from the first executive conversation to the finalist table, and delivered as senior architect for Fortune 500 clients in financial services, healthcare, energy and utilities, automotive, retail, and technology. Earlier, built and launched a national public-health platform for a sovereign government, ran the privacy operations behind Nike's GDPR program, and founded Keyed Systems, where I still design and ship governance, identity, and AI-enabled platforms. I move organizations from AI pilots to governed, production-grade programs, and I carry the legal, business, and engineering vocabulary to do it in one room.

Core expertise: AI Strategy & Governance · AI Testing & Evaluation · Data Readiness & Architecture · Responsible AI & Frontier-Model Security · Privacy Engineering & Compliance (GDPR, HIPAA, CCPA/CPRA, ISO, NIST) · Practice & Offering Development · Pursuit & Proposal Leadership · Partner & Sales Enablement · Executive Advisory · Change Leadership

Seeking: a Director or VP seat leading an AI, Strategy, Data, or Responsible Technology practice at a firm that measures leaders on pursuit outcomes, or the in-house equivalent owning enterprise AI Strategy and Governance.

EXPERIENCE

Perficient — Senior Solution Architect, AI Practice Lead, AI & Data PlatformsFeb 2026 – Sep 2026

Led the AI practice within the AI & Data Platforms service line, reporting to the VP of AI & Data Platforms. Owned the practice's offerings and points of view, led pursuits end to end, delivered as senior architect on engagements, enabled partner and sales teams, and managed direct reports.

  • Practice and offerings. Built and ran the AI practice across AI governance, testing and evaluation, data readiness, and AI strategy, working daily with Fortune 500 clients in banking, financial services and insurance, healthcare, energy and utilities, automotive, consumer goods, retail, and technology.
  • Client strategy and field leadership. Delivered executive-level AI strategy, readiness assessments, and governance frameworks that moved clients from pilots to governed, production-grade AI programs; regularly in front of C-suite and VP sponsors with points of view on responsible AI, model evaluation, and frontier-model security.
  • Pursuits and delivery. Carried a continuous portfolio of concurrent pursuits spanning executive positioning sessions, RFP responses, and paid delivery. Account leadership relied on me for the positioning, the deck, the pitch, and the RFP response, and I represented Perficient at the finalist table. Senior-most architect on delivery teams, setting technical direction and keeping practice guidance grounded in what ships.
  • Firm transformation and internal governance. Contributed to the firm's strategy for its next chapter as an agentic consultancy; served on the internal AI technology approval committee; authored the framework for classifying internal assets and accelerators; contributed the firm's point of view on next-class model security and its implications for clients.
  • Ecosystem and go-to-market. Enabled sellers on positioning and qualification, and enabled hyperscaler and platform partners (Microsoft, AWS, Google, Salesforce, Adobe) on the firm's AI offerings.

Keyed Systems LLC — Principal, Founder & CEO2004 – Present

Advisory and product firm for digital transformation, AI automation, and governance across healthcare, education, retail, hospitality, and the public sector. Active alongside my consulting career; incubated Senior6.com (COO; senior-living operations), LINQ Network (Executive Director; collaborative operations platform), and XAFE LLC (CEO; health threat response).

  • Directed enterprise transformation programs that combine AI-driven automation, data strategy, and risk governance to raise operational maturity, compliance, and innovation readiness.
  • Architected governance and compliance frameworks for Fortune 100 enterprises and government ministries across GDPR, HIPAA, CCPA, FERPA, FISMA, FedRAMP, ISO, PCI, and sector-specific safety standards.
  • Designed and shipped proprietary GRC and AI products: asset and inventory management, data classification, IAM/KYC hardening, automated publishing, and fine-tuned RAG/LLM agents for assessments, workflow orchestration, and knowledge management.
  • Advised C-level and government executives on digital strategy, ethical AI, and transformation governance at enterprise and sovereign-state scale.
  • Created hospitality, senior-care, and foodservice operational assessments, trainings, and evaluation/orchestration platforms.
  • Created an inbound-traveler and health unified-response ecosystem connecting Health, Defense, Customs, Tourism, and Airlines, advising governments on national policy and communication protocols for infectious-disease control.
  • Directed international operations for pandemic-management and secure-entry systems under emergency conditions: quarantine and symptom monitoring, vaccine and test verification, BLE/WiFi/LTE tracking wearables, and citizen and tourist mobile apps. Partnered with Google, Apple, and MIT PathCheck on privacy-preserving exposure notification.
  • Currently building and operating (2025–2026): a multi-tenant GRC platform mapping 500+ controls across NIST, ISO, HIPAA, and SOC 2 with evidence workflows; a shared SSO identity layer (Keycloak, Google federation) across a product family; a multi-tenant learning platform carrying a four-tier "AI at Work" workforce curriculum of 44 modules; field-audit and foodservice operational-excellence platforms with on-device speech transcription; an agent-operated devops estate with encrypted secrets, nightly backups, and disaster-recovery mirroring.

Representative engagements: Pearson Education (privacy director, UK–US legal liaison, GDPR strategy) · top-3 eCommerce retailer (privacy audits and compliance roadmaps for counsel) · Government of Barbados (COVID-19 response network) · Quest Diagnostics (support enhancements across 35+ sales and marketing systems) · PriceMDs (employer cost-containment solution) · Oklahoma OSDE/OMES (security and privacy program for multi-department data re-architecture) · Massachusetts DESE (BI/UX redesign and integration of state reporting) · U.S. Department of Education (ontology browser and integration specifications) · K12 Inc. (child-data privacy audits) · Barbados Ministry of Health (COVID-19 data-sharing protocols) · APWU (AI training and grievance-workflow automation) · Public Consulting Group (multitenant student datastore) · A4L / Student Data Privacy Consortium (frameworks and industry standards) · school districts, hospitals, hospitality, foodservice, and senior-living operators.

Webshield, Inc. — Vice President, Trust2019 – 2021

Blockchain-based trust and distributed identity data-authorization startup.

  • Enabled secure, person-centered data sharing through a Unified Trust Model governing identity and consent across sectors; built authority-partner programs aligning global regulations with blockchain protocols, with launch partners including the U.S. VA, Walmart, Ping Identity, and ForgeRock.
  • Directed cross-functional business development, technology integration, and compliance operations to scale adoption of privacy-preserving data frameworks.

Nike, Inc. — Legal Privacy Analyst III, Data & Platforms2017 – 2019

  • Privacy gatekeeper for consumer data across global products and legal liaison for data personalization, bridging counsel, product, and engineering.
  • Drove requirements for the privacy operations engine (standardized controls, PII flowcharting, intake and reporting, consumer data profiles) that became the backbone of the GDPR program.
  • Conducted global privacy and risk assessments for ML, apps, eCommerce, and third-party integrations; partnered with legal and leadership on privacy-by-design architecture, identity, and member acquisition and retention programs.

InBloom — Solutions Architect2013 – 2014

  • Non-profit middleware for education data interoperability. Directed requirements and design for a multi-state big-data product; shaped privacy policy, authored white papers, and led solution evangelism.

Mott MacDonald — IT/Operations Director, Product Manager2012 – 2013

  • Re-engineered business processes, increasing delivery 400%, cutting costs $300K, and reducing resources 25%; set product, pricing, and IP roadmaps. Partnered with Harvard on high-stakes teacher-evaluation measures, managing 100M+ student responses on SaaS platforms.

Choice Solutions (HMH) — Director, Presales2006 – 2012

  • Education data-warehousing, portal, and reporting provider (~$9M portfolio). Built requirements and proposals and won and led statewide education projects (SLDS, RTTT, ARRA); advocated for national standards (FERPA, COPPA, data-sharing policy); created predictive analytics for student performance and retention.

Earlier1999 – 2006

  • Center for Educational Leadership & Technology, IT Director (Education Commission of the States), 2005–2006 · Massachusetts Dept. of Elementary & Secondary Education, Analyst II, statewide web portals, CMS, and integration projects, 1999–2004.

COMMUNITY, STANDARDS & EDUCATION