Seasoned GRC/IRM Professional

I specialize in the delivery of RSA Archer solutions providing strategic direction, solution architecture, business analysis, and RSA Archer configuration to clients executing mission critical GRC initiatives. Prior to joining Crowe, I served as the GRC Practice Manager for an RSA Archer partner organization focused on implementing RSA Archer solutions. Prior to my role as GRC Practice Manager, I served as the RSA Archer System Administrator for Regions Financial Corporation, located in Birmingham, Alabama.

TUV Rheinland OpenSky offers one of the most advanced and integrated portfolio of security solutions and services for connected devices, platforms and Internet of Things (IoT) with the mission to enable a secure and safe digital future. With headquarters in Littleton, MA, TUV Rheinland OpenSky is a 100% subsidiary of TUV Rheinland Group, operating some of the world's broadest smart device and IoT testing labs, defining industry standards for functional safety and security and is a leading provider of inspection and assurance services that combine safety, quality and security certifications.TUV Rheinland OpenSky provides expertise to help clients protect information assets, minimize risk and accelerate the adoption of enabling technologies with its holistic approach and framework that addresses Cyber Security, Privacy, Cloud Infrastructure and Functional Safety requirements to build trusted, connected platforms. The portfolio of services supported by industry participation in defining such standards and research, enables clients to effectively stay at the forefront of adopting new technologies for managing safety and cyber risks. It provides advisory, consulting, systems integration, testing, certification and managed security services organized across three core disciplines for connected platforms: Advanced Cyber Defenses; Mastering Risk and Compliance and Secure Cloud Adoption.WEBSITE: www.tuvopensky.comADDRESS: 295 Foster St. #100 Littleton, MA 01460, United StatesE-MAIL: info@tuvopensky.comSPECIALTIES: IT Risk Management and Security, Infrastructure Services, Technical Business Consulting, Governance, Risk and Compliance, Cloud Security, OT Security & Testing, IoT Security Testing, Industrial Security, and Security Certification

Serves as technical manager/mentor for team of consultantsActs as lead consultant on critical projects that impact long term organizational goals and objectivesProvides expert consulting services throughout each phase of customer initiativesDetermines requirements and functional specifications for commercial and enterprise level engagementsDesigns, creates, and implements full RSA Archer solutions based on customer requirementsUses independent judgment in the development of solutions designed to solve unusually complex problemsLeads a team of consultants, directs the work of customers, or works independently to accomplish goals and objectives in a timely mannerTests, validates, and suggests optimizations for best performance of customer solutionsProvides education (via knowledge transfer) as it relates to the architecture, planning, and implementation of a customer’s specific security infrastructure environmentProduces accurate and detailed documentation for all custom solutions delivered

Serves as System Administrator for Enterprise Governance, Risk and Compliance platform.Develops applications within eGRC Suite to integrate and enhance current operational risk processes such as: RCSA workflow and certification, operational losses, key risk indicators, near miss events and SOX oversight.Serves as liaison to Information Technology to develop and review risk assessments, help identify risks to which the firm is exposed and work with business units to implement measures to prevent, mitigate or eliminate control breakdowns.

Participates in various department initiatives, including redesign of departmental metrics and time reports, support for automated workpapers application, and developing technical training materialsParticipates in the development of the quarterly Audit Committee packageMaintains audit universe and audit planPerforms quality assurance reviews to ensure compliance with internal audit methodologyAssesses relevancy of findings, potential exposures, materiality, improving or deteriorating trends, etc.Participates in 'high level/confidential' projects

Conducts audits of the Company’s information systems. Uses new audit technologies, including continuous audit (data mining), audit process automation, and comp...uter assisted audit techniques. Researches and assesses risks to information systems throughout the enterprise. Provides ad hoc consulting services to various groups throughout the enterprise. Provides management, information systems groups, and end users with an informed and impartial assessment of the extent to which they may safely rely upon the Company’s information systems.