PROFILEI’m an experienced risk and controls manager specialising in technology and finance in global organisations. I take pride in a pragmatic approach that gets things done while maintaining a proportionate view of risk.I have experience of several aspects of the risk and control environment and of different roles and organisations over many years. This helps me to see problems from different perspectives. I have worked in the first line of defence, managing risk and overseeing controls; in the second line, taking responsibility for policies and standards; and in the business, owning and operating controls while performing wider management responsibilities. I also have experience of related disciplines such as SOx, IT security, privacy and quality assurance. For example, I have led a global IT security improvement programme as well as the response to a global privacy audit. I succeed in bridging between the risk and compliance function and other functions, particularly finance, IT, HR and Legal, gaining trust and talking a language that all parties understand. I have experience of cloud solutions such as Office 365, Workday and Apptio, underpinned by wider experience of IT outsourcing, supplier management and programme/project management.I have recent, hands-on experience in financial processes. I have led R2R (record to report) compliance at a range of delivery centres worldwide, performing lead SOx audit roles for control testing in Europe, Asia and the Americas. I have managed the recharge of the IT project portfolio across a major bank. I have worked in sectors including financial services, management consulting, pharmaceuticals and government.KEY SKILL AREASIT / Finance risks and controls – Expert in assessing risks and controls, including SOx controls and within a wider control framework; also for third party services (e.g. cloud) using independent audit reports (SOC1/SOC2). Cost allocation – Experienced in allocation of shared IT costs across a complex international business using data provided by Apptio, a leading cost allocation tool.Privacy applied to IT – Understanding of international privacy laws with experience spanning IT, legal, HR and compliance functions. IAPP certified.Policies and standards – Experienced in leading policies and standards for a global IT organisation. IT security management – Experienced IT security programme manager with knowledge of standards, training and ISO 27001.Programme quality assurance – Substantial experience of major programmes in public and private sectors.