William E. Serowka
*** ********* ***** ****, ** *0013 email: ********@*******.***
Phone: 847-***-**** LinkedIn: www.linkedin.com/in/billserowka
Executive Summary
Head of ISR Policy & Controls / Director of Purchasing / Vendor Risk Management / Cyber Security Risk / Director of Platform Support
Over 20 years’ of diverse IT experience within large International organizations. Proven expertise managing teams. Strengths include managing IT platforms, negotiating and managing contracts and subcontracts, achieving savings goals, staff administration, sourcing / teaming with strategic subs, workload balancing and business / customer relationship management.
Experienced global leadership, communication, and negotiating strengths; relates well to all levels of staff, management and customers with ability to influence executive management decisions. Effectively balance business needs against legal/regulatory concerns. Respected throughout career for excellent managerial, analytical and problem-solving skills. Experienced ability to lead major, enterprise-wide, and global programs. Consistently recognized as a valued resource for broad base of corporate-wide initiatives and projects. Competencies include:
Contracts / Sub-contract Management
Business / Customer Relationship Liaison
Team Productivity Improvement
Global Project Management
Contract Entitlements / Asset Management
Policies & Controls
Data Privacy
Vendor / 3rd Party Management and Vetting
Benchmarking and Best Practices
Professional Experience
HSBC (Hong Kong Shanghai Banking Corporation)
Global Head of ISR Policy & Controls 2015 - 2017
Charged with leading the ISR Policy & Controls Transformation as a key work stream under the Information Security Risk transformation program, resulting in the alignment/adoption of the Three Lines of Defense Risk Model, Design and implementation of a new Information & Cyber Security Risk (ICSRM) Policy Framework including the adoption/enforcement of the new ISR Risk Taxonomy.
Restructured & Designed an Information & Cyber Security Risk (ICSR) Policy & Governance Framework
Consolidated/Reduced the current ISR policies by 60%
Restructured all policies to align with the National Institute of Standards and Technology (NIST) Cyber Security Framework
Restructured all policies to include Key Risk Indicators/Key Performance Indicators to measure compliance
Transformation of the policy dispensation process to align with business risk appetite
Global Head of Application Security Governance / Reporting 2010 - 2015
Tasked with providing governance over a global application security team to ensure that all applications were accounted for in an inventory system and that all cyber security risks were properly identified, assessed, managed and reported on.
Designed/Published monthly compliance reports allowing management to make educated decision regarding risk
Monitored all security related audit/regulatory findings to 100% on-time closure
Provided application security training for developers, architects, etc.
William E Serowka, Resume Page Two
Represented ISR in all internal/regulatory audits involving application security resulting in a reduction of false positive findings
Co-Chaired an international Data Privacy working group on the use of production data in a non-production environment (PDiNPE) including Legal, Audit, Compliance, ISR, IT
Authored a Data Privacy PDiNPE Questionnaire to assess the Inherent/Residual Risk levels resulting in an increase in mitigating controls and a reduction in residual risk
Director - IT Procurement 2008 - 2010
Tasked with leading a team of 20 North America Purchasing professionals responsible for supporting the procurement of a technology spend of $1.5B and the management of IT 3rd Party vendor relationships. Responsible for maintaining a strong relationship with all areas of Information Technology.
Represented North America as a member of the International Management Team negotiating Global agreements
Directed an IT Purchasing team who achieved annual savings of $100M+
Increased IT Spend Influence from 80% - 95%
Produced an Approved Supplier List for IT suppliers including diverse suppliers
Automation:
oOn-line ordering system for staff augmentation Statements of Work.
oe-Invoicing
oe-Ordering
Promoted the offshore of tactical and back office processing resulting in a reduction of expenses
Performed the Vendor Management – Material vendors tracked annually. SLA’s monitored monthly with customer
Directed the North America IT Asset Management program to capture software entitlements
Achieved/Rated Top Purchasing Manager from a management team of 5 professionals
Sr. Manager/IT Negotiator 2005 - 2008
Provided technical and a Procurement insight on technology related projects
Negotiated complex regional and global hardware and software Agreements ranging from $25K to $100 million
Maintained strong relationships with the businesses and the IT organization
Achieved annual individual savings of $20M
Negotiated global software Agreements benefiting all of HSBC
Performed benchmark pricing throughout the IT Supply Chain
Zurich NORTH AMERICA/FARMERS GROUP INC.
Director – z-Series Support 2000 - 2004
Provided leadership to a team of twenty technical employees supporting the entire mainframe platform.
Administered a budget of $30M
Collaborated with Procurement on all IT related negotiations
Maintained a service level of .9999 availability
Achieved/Rated Top ISP Manager from a management team of 20 professionals
Represented Zurich as a member of the Global IBM zSeries Business Leadership Committee
Business Relationship Liaison
Education / Training
Bachelor of Science, Computer Science - Roosevelt University (Cum Laude)