Debra Capadona

Senior Technical Program Manager | Regulated Product Delivery & Risk Transformation
Data Integrity, Controls & AI Governance

Executive-level program leader driving software, data, and risk transformation across regulated global enterprises.

✉️ deb.capadona@gmail.com 🔗 LinkedIn 💻 GitHub 🔗 Edge Condition Analysis

Leadership & Technical Competencies

Regulated Product Delivery & Design Controls

Drives full-lifecycle program frameworks for hardware + software medical devices, embedding Design Controls, SDLC phase gates, and risk-based decision making from ideation through commercial launch.

Cross-Functional Orchestration & Execution Excellence

Owns end-to-end timelines, budgets, and resource plans across R&D, engineering, quality, regulatory, and clinical teams; turns ambiguous requirements into committed milestones and holds everyone lovingly accountable.

Risk-Based Program Governance & Traceability

Builds integrated risk management into product architecture and data flows; ensures every requirement, verification, and validation artifact is traceable, auditable, and ready for regulatory submission on day one.

AI/ML Risk Governance & Model Integrity

Implements model-governance frameworks that ensure data integrity, drift detection, and regulatory alignment for ML systems operating at scale.

Systemic Risk Detection & Strategic Insight

Surfaces system-level risks through cross-domain insight and game-theory–informed analysis, driving strategies that stabilize critical environments and reduce exposure.

Clarity, Influence & Risk Communication

Distills multi-layered risk insights into concise guidance that drives aligned decisions across technical and executive stakeholders.

Professional Experience

Google via Synergis

Senior Program Manager | DMA-15 Compliance
2025 – Present | Hybrid, New York City
  • Driving DMA-15 compliance across all 8 designated Core Platform Services (Search, Play, YouTube, Chrome, Android, Ads, Maps, Cloud), aligning legal, product, and engineering on fairness, choice, and data-portability mandates
  • Oversaw the creation of the audit-readiness framework that improved data integrity, standardized documentation, and supported regulator-aligned transparency for the cloud native core products and services
  • Translated DMA-15 mandates into clear, actionable engineering deliverables and resolved cross-team interpretation gaps

GE Aerospace

Senior Program Manager Consultant | Cyber Separation Program
2024 – 2025 | Remote (USA)
  • Owned the cloud-separation strategy and execution for GE Aerospace's spin-off: stood up an entirely new, standalone cloud environment (multi-region AWS/GCP) while carving out from the legacy GE estate — zero airborne incidents, zero downtime for critical services
  • Consolidated 241 legacy applications into 97 cloud-native systems with full deployment automation, IaC (Terraform/CloudFormation), CI/CD orchestration (GitLab + Argo), and immutable configuration standards
  • Established the repeatable cloud-modernization playbook (landing zones, guardrails, golden paths) now being rolled out across remaining Aerospace portfolios
  • Served as the Risk Lead for GE Aerospace's enterprise-wide data center and cybersecurity-stack separation, overseeing the risk strategy for consolidating 241 legacy applications into 97 modernized systems during the corporate split
  • Oversaw the large-scale infrastructure modernization program including deployment automation, cloud orchestration, control mapping, and configuration integrity standards required for the new standalone environment
  • Led cross-functional risk assessment, issue remediation, and mitigation planning for platform, data, and identity pathways impacted by the split, ensuring safe cutover and sustained resiliency

Citibank

Director | Principal Program Manager | Data Governance Transformation
2021 – 2024 | Remote (New York City)
  • Delivered the bank's first cloud-native enterprise data-governance platform from the ground up; embedded policy-as-code, automated lineage, retention enforcement, and control execution across 50+ regulated applications running on GCP and AWS
  • Owned the multi-year modernization of data pipelines (Kafka, Snowflake, Collibra) and compliance services; replaced legacy batch processes with real-time, API-driven governance and automated evidence generation that slashed audit prep cycles by 70%+
  • Drove DevSecOps transformation across 12 domains: shifted ETL, MDM, and reporting workloads to immutable, containerized cloud deployments with full CI/CD guardrails and zero-trust control validation
  • Built and enforced golden-path cloud architecture patterns (landing zones, policy engines, drift detection) that unified engineering, security, and compliance teams and became the firm-wide standard for regulated data products
  • Turned thousands of pages of regulatory policy into enforceable, version-controlled code modules deployed via infrastructure-as-code — delivering audit-proof traceability at cloud velocity

JPMorgan Chase & Co.

Vice President | Lead Program Manager
2014 – 2021 | Remote (New York City)
  • Led development of one of the industry's largest and most complex ML forecasting models for CCAR and CECL, coordinating 20+ teams and 100+ applications across a major CPU/GPU compute cluster
  • Delivered model-governance software automating lineage, documentation, and model-behavior transparency to meet OCC and Federal Reserve expectations and reduce model-governance and regulatory risk
  • Owned full-lifecycle cloud-migration and modernization program for 300+ legacy applications; designed and enforced Design Controls-equivalent governance (traceability, verification artifacts, risk-based phase gates) across the entire portfolio, delivering compliant, auditable systems on time
  • Key technical program lead on the migration of 100+ legacy applications to a governed Snowflake warehouse, embedding retention logic, lineage automation, and control execution to strengthen data integrity and support continuous compliance
  • Lead technical program manager for the delivery of the initial build and adoption of the data governance framework, creating applications for provenance tracking, authoritative-source management, and policy enforcement — translating regulatory requirements into enforceable, risk-reducing software
  • Directed cross-disciplinary engineering teams integrating governance telemetry and model-risk analytics, reducing end-to-end model runtime by ~25% and decreasing regulator queries through improved traceability and operational reliability

Technical Skills

Platforms

Snowflake | Kafka | Collibra | GCP | AWS

Domains

Data Governance | AI/ML Compliance | Infrastructure Modernization

Frameworks

Agile (SAFe / Scrum) | Risk Management | Ethical AI

Education & Certifications

B.S., Information Systems Management

University of Maryland

Certifications

Certified ScrumMaster (CSM)
Certified Scrum Product Owner (CSPO)

Featured Projects

Linguistic Analysis Platform

Large-scale NLP system analyzing 200K+ forum discussions using 9 custom BERT models. Demonstrates end-to-end technical delivery: database architecture, GPU-accelerated ML inference, statistical validation, and interactive visualizations.

View Project on GitHub →