Naresh Iyer Email & Phone Number

Sydney, Nsw, Au

Sydney, Nsw, Au

Sydney, Nsw, Au

Sydney, Nsw, Au

• Facilitating Risk & Control self-assessment workshops with senior management.• Maintaining Risk profiles for 2 Business units, 5 business platforms and 10 material technology suppliers• Ongoing management of IT service risk and control ratings covering 140 IT infrastructure services and delivery tools• Developing presentation packs for monthly Risk & Compliance Council sessions• Providing risk management advice for Application delivery teams supporting key initiatives such as continuous delivery, mobile application development and use of cloud to manage code deployment.• Providing BAU risk management support for material infrastructure suppliers (including HPE, Verizon, Telstra, NetApp, EMC, AWS and Optus). • Investigating and facilitating bow-tie assessments to assess root causes for major incidents and near misses including IT security breaches• Running risk awareness sessions across teams as well as delivering bow-tie training for GMs.• Planning and scoping annual controls assurance testing covering high risk services and material suppliers along with supporting controls. Reviewing the outcomes provided by the central controls assurance function to ensure adequate quality and delivery to agreed scope.• Mentoring risk champions to provide day to day support for managing issues and actions and triage of self-identified issues.• Developing documentation and facilitating risk acceptances for any risks identified outside of risk appetite that management are unable to remediate• Development, collation and reporting of key risk indicators (KRIs).

Sydney, Nsw, Au

I have primary responsibility for developing, rolling out and maintaining Macquarie’s information security and risk policies and standards, and IT security awareness across the Macquarie Group. In addition, I am responsible for developing and collating monthly IT risk management reports which are presented to Technology Executives (CIOs). Key achievements:- Developed new policies and control frameworks to facilitate innovative approaches to IT Change Management and Access Management effectively addressing concerns raised at a Board level. - Rolled out groupwide IT security awareness training to over 15000 employees across Macquarie. Developed and rolled specific IT security awareness campaigns covering topics such as social media risks, email security, password security and the secure use of USB drives.- Assessed Macquarie’s compliance against APRA’s PPG234 guideline on Information Security and wrote the associated briefing papers for Macquarie’s Technology Executive and Board Risk Committee. - Developed the initial project plan and business case for Macquarie’s online security program.- Rewrote of all of Macquarie’s 15 Information Risk Policies and standards which had not been reviewed for more than 5 years. - Automated Macquarie’s information risk policy dispensations process which previously a manual paper based process was taking, on average, 2 months to approve. Improvements to the reporting improved governance over dispensations to ensure their lifecycle was properly managed.- Developed and rolled out a process to assess and manage spreadsheet risks across Macquarie.

Sydney, Nsw, Au

Responsible for managing a portfolio of internal audit clients in the Institutional Bank and Financial Accounting business IT areas. Development of annual plan for IT audits across Institutional Banking and FinancePlanning, delivery and monitoring of the audit plan.Managing and reporting on individual IT audits and conducting reviews over significant change programs running across the business.Maintaining and managing relationships with senior IT personnel (including business unit CIOs).Managing the planning and execution of SOX testing (application and general controls) over Institutional Banking and Finance applicationsProfessional Development Manager for 4 staff members

Barangaroo, New South Wales, Au

Responsible for:- providing operational risk advice to business- managing IT compliance reviews and audits across the business- ongoing risk monitoring of IT- acting as Operational Risk representative on various project steering committees

Gb

Managing various client assignments working the financial services industry including:- managing implementation of GST- scoping and planning for internal projects- managing independent reviews over large scale projects- implementing best pratices for reviewing projects for internal audit departments- managing IT audit assignments

Dublin 2, Ie

Responsible for the design and implementation of SAP R/2 and R/3 modules for a financial services and a distribution company:- GL- Purchasing- Materials ManagementConducted an assessment over shortlisted financial management systems for a large mining company