• Created and expanded GRC-A program for SAS globally, growing the team from 1 person to 20 professionals, with steadfast focus on improvement. • Led team responsible for expanding and maintaining governance functions under the ISMS Board, advising and reporting compliance risk. • Managed risk program in alignment with ISO 27001. Risk assessments focus on IT security objectives for cloud and corporate systems. • Led security compliance program, managing regulatory and compliance requirements of key standards, including NIST 800-53/FISMA; SOC 1, 2, and 3; ISO 27001; FDA Part 11; FedRAMP; HIPAA; and GDPR.• Expanded internal audit program, including creation of audit charter, risk-based schedule, remediation management, and ISMS Board presentations.• Managed team responsible for design and implementation of GRC software, resulting in considerable time and cost savings from automation. • Developed global certification strategy, including cost/benefit analysis to attain new certifications or standards, expand certifications, or retire them. • Managed preferred 3PAO strategy that resulted in significant cost savings via consolidation of certifications and resources across the enterprise.• Managed global team engaged in negotiations, security questionnaires, and compliance reviews for on-premise and cloud deployments.• Expanded GRC-A global team’s focus from hosting to corporate and on-premise objectives. Created strategies in line with cloud computing goals.• Designed partnership program to optimize pre- and post-sales support with global regional leads. Partnership with sales, legal, IT and security teams resulted in more consistent and profitable deployments.

• Managed consulting firm performing a capability assessment of cloud division’s service offerings. Results were used in defining value propositions.• Directed the development of a Service Delivery Methodology for the cloud hosting division, defining consistent standards.• Improved Quality Management System, including management of policies and participation in the continuous improvement Quality Workgroup.• Managed Customer Audit Program, including creation of policies and processes, management of audits, and tracking of remediation.

• Defined organizational and governance for supply chain division following the acquisition of multiple cruise lines from Princess, Corp.• Developed operational strategy to leverage a financial shared services model across eight global companies after acquisition. • Directed, developed materials, and presented at CIO Council meetings. Result of meetings identified projects that were implemented for global cross-brand synergies, cost reduction, and global efficiency gains.• Completed process audits of multiple functions. Process re-engineering recommendations allowed for efficiencies and cost reductions.

• Managed global account management strategy following acquisition of consulting division. Strategy optimized market opportunities in the context of country-specific political and regulatory structures.• Designed market entry strategy for a telecom provider expanding to Latin America. Analyzed business and public policies to evaluate operations.• Developed growth strategy for an online marketplace for a consumer products client. Work included definition of target market, potential partners, spin-off strategies, and an initial business plan.• Coordinated contractual terms for two Fortune 50 firms partnering to create an investment NewCo. Defined organizational strategy, target customers and services, and marketing strategies.

• Developed change management strategy for a pharmaceutical client implementing a large ERP solution across multiple countries in Europe.• Defined and communicated market entry strategy, organization and business model development, and marketing plans for an online business designed to expand global capacity for a professional services firm.• Developed and communicated market expansion strategy that incorporated industry, competition, and organization-specific metrics for a leading utility firm. Analysis involved measurement of potential client market growth, impact of regulatory constraints and capacity utilization.