Pooja Ravichandra is a Principal Product Manager for software supply chain security at Microsoft. She leads SBOM and VEX readiness for the EU Cyber Resilience Act on a flagship operating-system release, and led the program that brought unmanaged third-party code under governance in one of the largest codebases in the world. Her work sits where regulation meets engineering: turning policy into requirements teams can build, own and verify.

Pooja is an invited university lecturer on securing open-source software, is co-writing Beyond the Prompt, a book on AI and emerging technology for general readers, and serves as a judge for security and AI competitions, including HackUTA and the BIG Awards. She has more than ten years of experience across software engineering, data and product management. Views are her own.