J. Mark Sanman, Cisa, Cissp-Issmp Email & Phone Number

Whitefish, Montana

Detail-oriented Governance, Risk Management and Compliance consultant with proven success assuring IT delivers against business needs effectively and efficiently. Key strengths in outsource deal negotiation and management, risk management, IT and financial controls and information security management. Extensive international experience adapting global IT solutions to local business and regulatory requirements.

Cincinnati Area, Oh

Key deal team member for $650M / 5 year agreement with large European outsource provider for global voice and data networking services at 400+ global locations. Negotiated Statement of Work, Service Levels, Governance Model and Pricing Unit definitions in collaboration with legal counsel, finance, and outsourcing consultants. Led 6-person team of supplier and P&G commercial managers responsible for maintaining commercial value as supplier services evolved during the life of the deal.IT Controls Subject Matter Expert. Managed response to all internal and external audits of the governance organization, including Sarbanes Oxley reviews, annual control self-assessments and controls issues resolution.Developed risk management strategy and processes for IT outsourcing deals with total contract values exceeding $10B, covering all of P&G’s critical global IT infrastructure processes. These were subsequently identified as the current best practice approach in P&G’s shared services organization and reapplied to the 16 largest shared services suppliers.

Cincinnati Area, Oh

Supervised internal IT Infrastructure Audits, inclusive of network, computing platforms, middleware, database technology and e-business infrastructure (webservers, application servers, database servers, 100+ critical locations). Performed annual risk assessment that determined audit priorities for the following year. Supervised Auditors-in-Charge responsible for conducting specific audit engagements, including risk-adjusting audit plans based on initial audit information requests, formulating and positioning issues, and generating both detailed and Executive Audit Reports. Participated as a field audit team member at least twice a year.During this assignment, global IT Infrastructure was outsourced to HP, materially changing the risk profile of the area.• Successfully transitioned internal audit processes, working with supplier and the new IT Governance organization. • Ensured retention of full right to audit by rewriting supplier generated Audit Policy and Procedure Manual Chapter and aligning resulting position with P&G and supplier governance organizations. • Improved assurance of solid IT Information Security by development of risk assessment / risk management for outsourced business and technical processes. • Identified, brought to management attention, and obtained action to systemic risk of focusing IT Governance on contract compliance vs. business requirements.Sarbanes-Oxley: Collaborated with external auditor to identify SOX-relevant IT Infrastructure controls. Auditor in charge for initial SOX compliance audits of German and Greek subsidiaries. • Identified, brought to management attention and ensured resolution of Change Management process disconnects that clouded business responsibility for proper system operations.

Cincinnati Area, Oh

Managed Y2K-compliant EDI mapping for company’s North America operations.• Worked with Wal*Mart customer team to consolidate multiple small country EDI connections, which resulted in an improved customer relationship and reduced costs. • Managed efficient transition of key Clairol e-business processes such as EDI connectivity and product websites, when that business unit was acquired from Bristol Meyers, a P&G competitor.

Cincinnati Area, Oh

Oversaw installation and technical governance of outsourced private voice / data network. Initial network connected company operations in 26 countries. Subsequent to network startup, consulted with various in-country operations regarding network expansion in support of company business expansion. This included representing company communications requirements to foreign telecommunications suppliers, including government telecommunications ministries.

Masters, Electrical Engineering

Bachelors, Electrical Engineering