Global Head of Technology Risk and Control

. Continuous Monitoring. Technology Risk Management. Technology Lifecycle Management . Governance. Process Improvements

Lead and manage a team of experienced professionals and the monitoring of implementation of an enterprise information technology solutions, security risk management, policies, standards and best practices approach aligned with the company and industry standards. Act as an expert in information security and privacy regulatory mandates with a focus on protecting company's and customer's data. Partner and consult with various stakeholders to enable thoughtful and timely dialogue, guidance, and vision related to technology, security, privacy, and compliance-related risks and proposed solutions.

● Internal Audit relationship manager to Chief Information Officer (CIO) and his direct reports; develop and nurture productive relationship with IT Officers and staff. ● Reviewed and agreed on the scope and timing with IT management and the Line of Business management. Verified that relevant input from all stakeholders has been incorporated.● Led client engagements on a day-to-day basis and select appropriate frameworks, tools and approaches to use in performing those engagements and oversee the performance of staff. ● Consulted on risk and internal controls matter and presented audit findings to a variety of corporate stakeholders, including Executives (Sr. Staff) and External Auditors. ● Developed procedures, schedules, priorities, and programs for achieving audit objectives and goals. ● Mentored and trained Staff in applying basic IT auditing techniques. ● Prepared reports and other professional correspondence. ● Participated in various IT committees and project teams. ● Led in the recruitment, hiring and training of staff.● Conducted staff performance reviews.● Prepared and presented the IT Risk assessment results, IT audit plan, and the results of individual audits to the CIO and direct reports. ● Supervised and performed Sarbanes-Oxley section 404 compliance activities to IT general controls; coordinate 404 testing and other requirements with external Audit firm.

● Assisted in PeopleSoft 9.0 implementation focusing on financials as well as security controls.● Managed IT projects and ensure delivery of quality and on budget changes to the systems as requested by business owners.● Participated in Business Process Reengineering sessions and gather detail business requirements. ● Performed and coordinated the analysis and design of business systems. ● Developed and maintained a thorough understanding of the needs of the assigned customer group from the business and technical perspective. ● Worked closely with clients and with other system groups to capture business requirements and see them through implementation. ● Took ownership of all of the technical issues that need to be resolved to ensure a successful customer delivery.● Generated and maintain detailed design specifications. ● Collaborated with stakeholders to deliver on new business initiatives and platform enhancements.

• Routinely assess the IT Audit Universe through audits, projects, business partnerships, and team collaboration.• Build and maintain global partnerships with Operational, IT, and risk-oriented personnel through routine communication protocols.• Regularly attend IT Leadership meetings to discuss audit plans, emerging topics of interest, status of management actions, and insight on current and upcoming audits.• Scope, coordinate, and manage external partnerships and co-sourced arrangements associated with technical audits, integrated efforts, and SOX compliance.• Manage, coach, and mentor a team of Auditors towards execution of the IT Audit Plan. • Led the development and implementation of business recovery and continuity plans. • Led the performance of security and penetration studies. • Led security risk and vulnerability assessments and identified business risks, provided feedback and followed-up on recommendations.