Kevin M. Coleman
AI transformation and governance, cyber and technology risk, and audit committee leadership.
I'm a technology risk leader, hands-on AI builder, CPA and KPMG partner since 1998. For the past five years I've led the automation of IT compliance with machine learning and AI at large technology companies, and I developed a trusted AI governance framework now in use at a major public retailer.
- years in external audit, IT risk and audit quality
- 35+
- years as an audit committee chair
- 17
- PCAOB inspections
- 100+
- years leading AI-enabled compliance
- 5
What I bring to a board
I design and build AI-enabled risk, compliance and finance platforms, and I bring more than 35 years in external audit, IT risk and controls, and audit quality across payments, banking, healthcare, enterprise software and technology. I combine practical AI experience and cyber and technology risk expertise with audit committee depth, to help boards oversee AI adoption, risk and accountability.
- AI adoption and governance
- I lead AI and automation work for large technology companies, and I developed a trusted AI governance framework now in use at a major public retailer. I also build and deploy AI-enabled systems myself, so I bring practical implementation experience to board oversight.
- Technology, cyber and digital trust
- I've worked in IT risk and controls since 1994, and I apply that cyber and technology risk expertise to AI governance. I led SOC 2 reporting for major cloud and enterprise software providers and a global payments network, and helped design assurance frameworks for digital signature and certificate providers during the build-out of the internet's trust infrastructure.
- Financial reporting and audit quality
- I began in external audit. As a founding member of KPMG's team preparing audit engagements for PCAOB inspections, I took part in more than 100 inspections and fed the lessons back into audit methodology. I know what a high-quality external audit looks like from the inside.
- Internal control and Sarbanes-Oxley
- I helped many organizations design and run effective Sarbanes-Oxley assessment programs, and led a regional IT advisory practice through the growth those rules created.
- Complex, regulated, high-growth enterprises
- I have served global companies in payments, banking, healthcare, enterprise software, internet services and telecommunications.
Selected results
AI in production
I lead KPMG's Next Gen Compliance initiative to AI-enable the IT compliance function. Results so far at large technology companies:
- of user access review testing automated
- 50%
- coverage of change management testing
- 100%
- AI tool that risk-analyzes code changes
- Live
An AI governance framework in use
I developed a trusted AI governance framework now in use at a major public retailer, drawing on technical understanding of AI and experience in cyber risk, technology risk and internal controls.
An AI-first finance function I built
For a nonprofit where I serve as treasurer, I personally designed and built the AI-enabled systems behind its finance function:
- Books close in two days or less.
- Most accounting entries are automated.
- Revenue recognition is automated, with AI agents reviewing contribution agreements to check human judgments.
- Every expense is reviewed and approved before funds leave the bank.
- Audit schedules come straight from the systems, so external audits finish with minimal preparation and no surprises.
Led the investigation and response to a significant internal control failure
As audit committee chair, I drove the investigation into a significant internal control failure and led the organization's response, working with the board's executive committee to oversee it through to resolution.
Rebuilt the finance function
Afterwards, as treasurer and finance committee chair, I changed the finance process in ways that materially strengthened internal controls and the organization's financial position.
Twenty-five years at a public company's audit committee table
I present internal audit results each quarter to the audit committee and board of a large public retailer.
Built a regional practice and a global account
I was Western Region Partner in Charge of IT Advisory through the Sarbanes-Oxley era (2002 to 2009), then grew the relationship with a leading global drug distributor from almost nothing into one of the firm's top three global life sciences accounts (2010 to 2016).
Career
KPMG LLP, 1990 to present. Partner since 1998.
2022 to present
Partner, Technology, Media and Telecommunications
I lead the firm's Next Gen Compliance initiative to AI-enable the IT compliance function, first with classical machine learning and now generative AI, and apply AI and automation to IT compliance at large technology companies.
2017 to 2022
Lead IT audit partner
I led the IT audit on several of the firm's largest external audit clients, and SOC 2 reporting for major cloud and enterprise software providers and a global payments network. Quality review partner and founding member of the team preparing engagement teams for PCAOB inspections.
2010 to 2016
Lead partner, leading global drug distributor
I grew the relationship from almost nothing into one of the firm's top three global life sciences accounts.
2002 to 2009
Western Region Partner in Charge, IT Advisory
I led and grew the region's IT advisory practice through the Sarbanes-Oxley era, designing and running assessment programs, including for financial services technology organizations.
1998 to 2002
IT Advisory partner
I supported external audits and helped build the internet's trust infrastructure: assurance frameworks for digital signature and certificate providers, and advice to companies and governments on digital signature legislation and oversight.
1995 to 1998
IT Advisory manager to director
Promoted to partner in 1998, eight years after joining, when the path typically took twelve or more, on the strength of IT risk expertise.
1990 to 1994
Financial statement audit
Where I started: external audit of financial statements.
Board service
Board of Directors, youth financial literacy nonprofit
2002 to 2005 and 2006 to present
- Audit committee chair, 2006 to 2023
- Seventeen years. Established governance over the external audit process and led the board's response to a significant internal control failure.
- Treasurer and finance committee chair, 2023 to present
- Redesigned the finance process, strengthened internal controls and oversight, and built the organization's AI-enabled finance systems.
Internal audit lead partner to an S&P 500 audit committee
National off-price retailer, 25 years
Lead partner on the outsourced internal audit engagement. I attend quarterly audit committee meetings and present internal audit results to the committee and the board.
Credentials
Certified Public Accountant
California, licensed 2002
Claude Certified Architect
Foundations and Professional
Claude Certified Developer
Anthropic
BBA, Accountancy
San Diego State University, 1990
National Association of Corporate Directors
Member; NACD Directorship Certification in progress
Open to conversations
Board seats
Audit, risk and technology committees, where AI and cyber oversight meet financial reporting.
Strategic advisory
Helping boards and leadership teams adopt AI with governance, controls and accountability built in.
AI enablement leadership
Executive roles that put AI to work across finance, risk and compliance.