After reorganisation within CIO BISO, I have accepted new role to lead multiple functions which broaden my scope and responsibilities significantly. My team was covering three core functions: 1. Audit support programme - own, maintain and execute audit support process - actively support every internal audit within CIO organisation - guide and educate entire domain on what to expect during audit, how to behave in front of auditors, what to provide and how to provide etc. - be essential part of mitigation phase of every audit to achieve best possible results from audit - build and enhance audit toolkit (education materials for all phases of audits) 2. Internal assessment (Management and Self-assessment of Controls - MSAC) - own, maintain and execute MSAC process for entire CIO organisation - own, manage and enhance tooling for gathering 1700+ teams inputs - make sure every cycle is concluded on time with appropriate quality - drive consolidation activity to present results to executive level of management 3. Compliance support for CIO BISO domain - drive MSAC execution within our home domain - provide quality assurance for submitted assessments - consolidate inputs and present results to Vice president - own and drive Get-to-green programme - ensure privacy compliance for all applications within our domain - translate compliance requirements for easier implementation for all teams Managing all above functions requires thought leadership and communication skill as I have to communicate with various levels of organisation, starting with engineers and development teams, going up through management chain to the absolute top of the business unit - IBM CIO. On top of all these business deliverables, I am responsible for engagement of my team, their education, compensation, career progression and overall wellbeing.

Core duties remains the same as in 'CIO Network Engineering - Security, Compliance and Risk Advisor' role, but our team expanded the scope to cover 2 entire domains within company. Additionally, I was promoted to First Line Leader (functional/people manager) for our team in March 2021.

Due to organisational changes, my role expanded from geo (EMEA) specific to Global role across company/globe. While many responsibilities remained the same, it grew in terms of scale and complexity.*** Take end-to-end responsibility for security and compliance of Network Engineering domain• Act as a lead for all matters related to infrastructure security and compliance• Conceive, design and maintain a management system to sustain a high compliance posture• Knowledge in terms of security and compliance, identify and remove roadblocks, innovate and continuously improve, challenge status quo• Attend regular leadership reviews and connect with squads and subdomains• Maintain a can-do attitude, inspire others, maintain a healthy balance between leading/managing and doing*** Represent domain in formal security and compliance reviews, e.g. Internal Audits, External Audits• Be a core member of account's Audit Project Office• Engage technical teams and coordinate responses to initial data requests• Attend live testing meetings, look out for concerns raised during testing, take follow-up requests• Use judgement and expertise to mitigate findings, conditions and datasheets• Actively support risk management at the domain and/or subdomain level, help technical teams and service management evaluate and document risks• Keep up with good/best practices in the IT industry related to IT security*** Understand and monitor compliance metrics for Network Engineering domain using standard tools, e.g. NESSUS, SNOW…• Use the tools to identify and analyze performance decline in metrics across domain• Oversee root cause analyses, confirm pervasiveness of security and compliance issues, drive the deployment of solutions that are fit for purpose• Know process owners and work closely with them when troubleshooting failures and/or policy violations• Support the Vice President and Second Line Leaders with data related to security and compliance

♣ Take end-to-end responsibility for security and compliance of Network tower• Act as a lead for all matters related to infrastructure security and compliance• In cooperation with the Lead DPE and Offering DPEs conceive, design and maintain a management system to sustain a high compliance posture• Knowledge in terms of security and compliance, identify and remove roadblocks, innovate and continuously improve, challenge status quo• Attend regular leadership reviews and connect with squads and tribes• Cooperate with the EMEA Compliance Lead and other Tower Compliance Leads, act as a team, consult, brainstorm, bring up ideas, maintain link to IGA US• Maintain a can-do attitude, inspire others, maintain a healthy balance between leading/managing and doing♣ Represent tower in formal security and compliance reviews, e.g. Internal Audits, External Audits• Be a core member of account's Audit Project Office• Engage technical teams and coordinate responses to initial data requests• Attend live testing meetings, look out for concerns raised during testing, take follow-up requests• Use judgement and expertise to mitigate findings, conditions and datasheets• Actively support risk management at the offering and/or tower level, help technical teams and service management evaluate and document risks• Keep up with good/best practices in the IT industry related to IT security♣ Understand and monitor compliance metrics for Network tower using standard tools, e.g. ECM, CWP• Use the tools to identify and analyze performance decline in metrics across Network tower• Oversee root cause analyses, confirm pervasiveness of security and compliance issues across one or multiple towers, drive the deployment of solutions that are fit for purpose• Know process owners and work closely with them when troubleshooting failures and/or policy violations• Support the Lead DPE and Offering DPEs with data related to security and compliance

Responsibilities:* Raise/Review/approve changes for the network in EMEA.* Ensure proper service activation process is followed for network devices.* Provide network level 2 focal point for out of scope countries (ensure network services in EMEA are managed, audit compliant, secure, available, resolve outages and campus changes).* Manage and update the internal network security certifications document, according to the latest security standards and processes.* Supervise whole process of project implementation of new IBM office branches on small network in EMEA, analyze location possibilities and suggest best options.* Analyze issues, suggest solutions, troubleshoot and solve problems.* Broad IT consultancy. Help project managers, service managers and remote sites staff with network related questions. Assist them with deployment and planning. Create new network designs. Suggest best possible connection for specific custom criteria. Planning and risk assessment.* Lifecycle management. Technical coordinator responsible for scheduling required changes. Supervise, support and perform necessary hardware upgrades and configuration updates. Ensure all prerequisites are provided proactively and everything needed is prepared.* Relationships/Communications Management: Single point of contact assuring communication between: Network Level 1-2, Service Management, local focal points, Network Level 3, project management, management.* Incident and problem Management – closely cooperate with Service Management for severity 1 issues, executive alerts.Cooperate on root cause and trend analysis, feedback major service outages, major site network issues, control changes that affect the adherence of SLAs (e.g. network outage).

Responsible for supporting manager's tasks by updating database, creating reports regularly and upon manager's request, making analysis on incidents within network and notifying about repeating issues in particular departments and countries. Responsibility for migration Lotus Notes team room to website wiki-like system. Supporting IGA manager with solving requests from Middle East and Saudi Arabia helpdesk. Personally responsible for ID Management, e.g. creation / removal, access approval for various IBM tools (Tivoli Identity Manager, RSA Security Console, WAM Asset Center, ASO, DRMS), websites, all for Middle East and Saudi Arabia IBM Partners.

Responsible for optimising hiring process by updating database, creating reports upon recruiter's and hiring manager’s requests, scheduling interviews with suitable candidates, helping with direct search on social networks, pre-screening suitable candidates and performing other day to day tasks.Primary job objectives:• Cooperation with recruiter on identifying the best recruitment sources• Develop a pool of qualified candidates in advance of need• Support with recruitment process, feedback collection and data recording• Regular reporting• Participation on regular meetings• Administration• Use job boards and professional networking sites to identify and source candidates

Responsible for delegated administrative tasks in assigned departments (credit department, passive product department, archive).Primary job objectives:• Updating credit database• Accepting/rejecting credit applications according to internal policy• Communication with managers• Organizing archive files• Preparing archive for migration to another city (finding best criteria for assorting documents)• Creating archive bookmarks in digital form to increase efficiency in searching