Hi, I'm Sahith.

I lead compliance, transformation and AI programs that keep a global company's devices, and the data on them, accounted for.

I've spent seven years at Meta, and for the last five I've owned IT asset compliance for its enterprise supply chain. That covers hundreds of thousands of laptops, phones and other devices, from the day they're bought to the day they're securely wiped.

I like problems that are messy and cross-functional. I find where a manual process is leaking time, money or risk, build the case for fixing it, and see the fix through with engineering, legal, security and finance until it runs by itself.

Outside work, I'm usually behind a camera, out exploring nature, or setting up a board game. I'm also a dad to one little person who keeps me very busy.

Based in London, UKOpen to roles in the UK & India

Current work

Lead Supply Chain Analyst, Compliance · Meta

London · 2022 to present

I run the compliance side of the device lifecycle. In practice that means automating how devices come back when people no longer need them, catching risk before an auditor does, writing the standards vendors and teams work to, and building self-service tools so fewer things need a ticket. I lead a team of ten and work closely with leadership on where to invest.

Device recovery, automated. The share of devices overdue for return fell by about 38% in three months after I moved outreach from manual follow-ups to an automated platform.
Risk caught early. I built a monitoring system from scratch that now keeps compliance health near 99% and has cut risk exposure by 28%.
AI-built tools. I delivered five internal applications with AI as a core collaborator, work that would otherwise have needed a dedicated engineering team.
Audit-ready. I led a 150-control compliance framework, and an India asset audit that closed with zero variance.

See my work

Previous work

Google · Product Applications Analyst (contract)

Mountain View · 2021

Partnered with product support managers on complex customer-support analytics, and turned ad-hoc analyses into automated dashboards that made reporting 40% faster.

Meta (then Facebook) · Supply Chain Analyst (contract)

Menlo Park · 2019 – 2021

Kept the business running through COVID-19, resolving 2,500+ equipment requests during the move to remote work. I co-designed a ship-to-home process for 1,100+ new hires, audited data-centre laptops to full accountability, and ran device retirement, refresh and recall programs.

Cleantech Open · Business Data Analyst

San Francisco · 2018 – 2019

Built new KPIs in Python for a clean-tech accelerator, helping lift program performance by 12%, and piloted cohort and impact dashboards.

Tata Consultancy Services · Associate System Engineer

Hyderabad · 2015 – 2017

Where I started. I built Java middleware for a US bank (USAA) that cut processing time by 30%, with zero production defects, and won the On-The-Spot and Zero Defect Best Team awards.

Internships

2012 – 2018

SoPact, Research Analyst (market-entry research and lead qualification) · Hult International Business School, Corporate Relations & Career Development (500+ recruiters, events for 1,000+ students) · HP, Robotics Intern.

Education

MSc Business Analytics, DistinctionHult International Business School, San Francisco

MSc International Business, DistinctionHult International Business School, San Francisco

B.Tech, Electronics & CommunicationAmrita Vishwa Vidyapeetham, India

Get in touch

If you're working on transformation, AI programs, or risk and compliance at scale, I'd be glad to talk.

kota.sahith@yahoo.in

LinkedIn: linkedin.com/in/sahithkota

Download my CV (PDF)

Selected work · 2022 – 2026

My work

A selection of programs I've led at Meta. I describe them by what they do rather than by internal names, and results are shown as changes rather than internal figures.

Device recovery2022 – 2026Strategy, requirements, design, rollout

Automating device recovery for a global workforce

Devices people no longer need still carry hardware value and data. Getting them back used to mean manual tickets, one-off emails and follow-ups by hand.

What I did

I weighed building against buying and piloted an off-the-shelf chatbot. When it couldn't scale, I shaped the requirements for an in-house outreach platform with reusable templates, scheduling and conversation flows. Then I designed an automated reminder cadence across five regions, with escalation to managers when someone ignored repeated reminders.

Outcome

Overdue devices down about 38% in three months, beating the target
Return rates on escalated cases up about 60%
Multi-million-dollar device value recovered in the first months
More than 80% of returns now self-service; thousands of hours of manual work removed each year
Now used company-wide for security notices, hardware upgrades and event reminders

Risk monitoring2023 – 2026Built from scratch; owner

From audit findings to early warnings

Compliance gaps used to show up during audits, after the fact. Risks weren't catalogued and controls had no shared identifiers.

What I did

I created a risk catalogue and control IDs, set thresholds, and launched alerting on the five most critical workflows. I then automated task creation whenever an alert fires, built the monitoring dashboards, and extended coverage to telecom and inventory accuracy.

Outcome

About 99% compliance health across monitored workflows
Risk exposure down 28%, with all critical and high-risk cases cleared
Specific service-level breaches cut by 75–87%
Coverage grew to 13 workflows and about 30 controls

Device security2024 – 2025Risk case, alignment, delivery

Locking down devices that go missing

Devices reported lost, stolen or not returned were locked by hand, if at all. Laptops and desktops weren't covered.

What I did

I made the case for leadership to accept interim risk and fund engineering. I ran a phased rollout across several operating systems, starting with phones and tablets, with test plans and failure tracking. I then drove a one-time clean-up of the backlog.

Outcome

Tens of thousands of legacy devices secured in one remediation
Automatic locking is now standard for every missing data-bearing device
Audit commitment met on time

Governance2024 – 2026Program lead, with an external advisory partner

A control framework built to pass audit

The compliance function was young and had no single standard for handling IT assets, so audit readiness depended on what individuals knew.

What I did

I re-scoped the program, wrote a third of the standards myself and reviewed the rest. I directed a risk-control matrix that rates each control for security, operational and regulatory risk. After a baseline assessment, I designed a three-phase audit (scope, test, remediate) that puts every high-risk control first.

Outcome

About 150 controls across about 30 standards
Baseline effectiveness measured, with a remediation plan toward full effectiveness
Controls tested under the new standards came back with no exceptions

Audit2024Project lead, on site at four offices

First physical asset verification in a decade

The India offices had never had a physical verification of fixed assets, and the finance register didn't match operational records.

What I did

I designed the scope and process with external and internal auditors and finance. To avoid recalling devices people were using, I verified them virtually through connectivity data and automated messages. Then I reconciled the register line by line.

Outcome

Tens of thousands of assets verified, physically and virtually
Thousands of register discrepancies resolved
Closed with zero variance and no disruption to daily work

AI tools2026Originated each tool; requirements, data model, privacy review

Five AI-assisted internal tools

As an early adopter of AI in my org, I delivered five self-service applications using AI as a core collaborator from concept to production. Each would otherwise have needed dedicated engineering investment.

Employee asset history. Every device a person has held, on one searchable timeline. AI flags unusual replacement patterns, and a fleet-health view shows trends by organisation. I led its privacy review.
Lost-and-found triage. Security and facilities staff look up a found device and get the right next step, without broad system access.
Vendor self-service portal. Staffing-vendor managers see only their own workers' devices and track returns from people who have left.
Privacy-preserving spend analytics. Pseudonymised data shows trends and anomalies. Identities are revealed only during an active investigation.
Manager compliance nudge. Managers see which team members hold non-compliant devices and can send a reminder in one click.

Third-party risk2025 – 2026Compliance, privacy & security lead

Holding outsourced vendors to our standards

As device-lifecycle work moved to third parties, security and data protection had to move with it, written into the contract.

What I did

I owned the privacy, security and legal sign-offs. I wrote our compliance standards into the contracts, set physical and personnel security requirements, specified certified data wiping (NIST 800-88) and disposal, and pushed for stronger liability terms.

Outcome

Multiple third-party sites qualified to operate
For contractor device returns, automated vendor notifications lifted return rates to 93%, against 72% elsewhere
Contractual penalties enforced for the first time

Returns2025 – 2026Business case owner

Better returns for departing employees

Departing employees were sent an empty box by default, whether they needed one or not.

What I did

I compared QR-code drop-off with mailed boxes, launched QR returns, and made the case to stop sending boxes automatically.

Outcome

QR returns came back at 2.5 times the rate of mailed boxes
Adoption of 80–90% or more
Six-figure annual savings

Also along the way

Right-sizing an audit finding

I re-analysed an audit finding and showed about two-thirds of the flagged devices were out of scope. The finding was downgraded to Low.

Access and privacy governance

Quarterly reviews of thousands of permissions, encrypted handling of sensitive personal data, and compliance with a new regional data-protection rule.

Desk sharing rollout

Planned the process and tooling changes affecting almost every employee, and supported launches at 15+ sites.

Faster tablet provisioning

Cut lead time from 6–8 weeks to 1 week, and transfer-and-wipe turnaround from 2 weeks to 72 hours.

Portfolio framework

Built the first version of a program-tracking dashboard in under two weeks. The whole org adopted it.

Leading people

I lead a team of ten. I'm the org's go-to compliance expert, and I've presented best practice to 200+ staffing vendors.

Get in touch