Governance, Risk & Compliance Consultant (GRC) and Project Manager

Professional Profile

Strengths

Broad managerial analytical, technical and

skills in Information Technology and Security.

Communicating technical issues to both technical and non-technical audiences.

Create and connecting dots from diverse points of information by asking the right questions in situations of complexity and/or ambiguity.

Leading teams managing projects from concept creation through to effective implementation

Deep expertise in business process management, project management, risk assessment and technical impact analysis

Process engineering, risk mitigation and profitability enhancement from process optimization and process re-engineering

Cross Domain Expertise

IT Strategy and Planning

Business Architecture

IT Architecture and Management

IT Governance and Framework

Governance, Risk, Compliance (GRC) and IT

Audits

Vendor Management and Client Communication

Team Management

Escalation Management

SDLC/Software Development and Management

System and Application Management

Project Management

Certifications and Education

Google Cloud Platform (GCP) – (April/2018)

HIPAA training (Jan./2018)

Agile (2017)

ITIL v3 Foundation (2008)

Company SOA Auditor (2006)

Process Auditor (CMMI) (2005)

Telecom Management (2002)

Carnegie Mellon Professional Development (2003)

Applied Computer Science

Overview: Manish is forward thinking and award-winning IT professional with a track record of pioneering governance, risk and compliance solutions.

He creates solutions that are simplistic in concept but use the natural echo-system to deliver effective and measurable changes. This allows management to take bite size action that reduce risk exposures, reduce costs and optimize process and business results

Manish has managed and delivered many mission critical projects such as the Olympics, where failure is not an option. His success has been repeatedly proven in Public, Government and various Private sector roles for organizations such as Siemens, Deloitte, IBM and the Government of Ontario.

His success stems from innovative thinking and deep expertise in software development, architecture, governance, project management and business operations.

He has managed international audits partnering with Internal and External Auditors. Manish created detailed testing controls effective to satisfy Risk officers examinations.

His framework and methodology expertise includes ISO 27001/2, ISO 38500, SOX, COBIT, HIPAA, GDPR, PIPEDA, PCI-DSS and ITIL.

Career Highlights:

• Saved companies multi-million dollars many times.

Gartner Research Group “achieved a level of maturity in BPM that is unusual in the field.”

• Strong M&A skills, e.g. reduced business processes by 56% on and large scale M&A project

• Received “Thank you notes” from Siemens’ CEO, CFO and Risk and Internal Control (RIC) Officer and featured in internal publications three times

•IBM recognition awards (Outstanding Achievement Award, Technical Service Award)

•Managed a teams from 3 to 63

ISACA Membership Number 262603

Security Clearances – Now expired.

adfqd4@r.postjobfree.com 416-***-****

InfoTech Research Group (Consulting – worked in USA with TN Visa – W2) 2018-2020

Manager, Consulting CIO

• Delivered client engagements within Consulting practice for a variety of IT strategy and business improvement services

oAssist in developing new consulting business, building compelling offers, responding to Requests for Proposals (RFPs), and helping to develop junior team members. Responded to 56 RFP in one year which is tracked in Salesforce.

oContribute to the continuous improvement of research content.

oSupport business development activities by participating in proposal writing, project scoping, and presentation of consulting solutions to clients, which includes preparing and presenting deliverable and reports

oDevelop Processes for RFP Project Management

oReduce RFP costing time for 24 Hours to 4 hours by automating the processes; Prepared 56 RFPs in one year.

oProperly classifying and archiving client proposals and deliverables.

o Clients include Governments, Banks, Healthcare, Education

Transportation: State government - Created IT Governance and Strategy for integration between IT and OT division (Team 3)

Healthcare:

Build a script for existing information for BCP/DR project (Team 4);

3 year IT Strategy plan for ASC centers.

Government: Projects – Whitepaper on 311 Roadmap;

Bank: IT Strategy planning for Global bank (Team 3)

Taught various IT courses at CIO education instituted, such as Stakeholder Management, IT Strategy, Cybersecurity, and Governance, to CIO association (35 Attendees); Prepare 10 Training Blueprint documents

Thinkers Corner (Consulting) 2015-2018

Senior Consultant (Contract)

Conduct risk assessments of business processes and supporting environments; (Determining risk; evaluating the existence of controls that help reduce risk; developing residual risk and risk treatment plans)

Evaluate organizations against multiple best practice control frameworks, vertical specific requirements, or Federal regulations (ISO 27001/2, HIPAA, COBIT, PCI-DSS, FISMA/NIST)

Assist clients in the delivery of governance, risk management and compliance services in support of the effective management of organizational information

HIPAA Course – IT Audit in USA (2018)

Adviser to two start-up companies on Product Development (2017, 2018)

Adviser on FinTech product development (2016)

Siemens (Manufacturing/Banking) 2004-2015

Senior Consultant (3 concurrent roles), Governance, Risk and Compliance (GRC)

Process and Data Governance (2004 - 2015) [Business Architecture / Solution Architect] (Team -3)

Developed and managed the governance and framework for all Business and IT processes and procedures.

Aligned local and global policies, operational responsibilities, global board participation and supporting global operations in the Americas and Europe.

Developed and conducted process audits to identify business operational efficiencies.

Developed and maintained all IT procedures including Disaster Recovery, Emergency Business Resumptions, Procurement, Change Management and Problem Management.

Using Business Process Management (BPM) methodology, blended several methodologies inclusive of Zachman Framework, PMP-PMBOK, ITIL, COSO, COBiT, ISO 27001/2, and ISO 38500 methodologies, to support ISO and SOA (ICFR) requirements.

The Future stated Operation (FMO) “To-Be” process started with mapping the “As-Is” to future method of operation (FMO) “To-Be” process, which is used to develop Gap analysis and technical solutioning. Mapping was done at multi-level of detail (VACD to EEPC) specifications.

Country Quality Manager for over 12,000 processes.

Consultant to the USA divisions and Brazil.

Trained people over 300 in all areas of the company (HR, IT, SCM, Export Control, Healthcare)

Application Governance (2011 - 2015) (Team -3)

Developed and managed a new functional area (Governance, Business framework, and Methodology) for managing software and applications, with 20% growth rate annually.

Defined all processes and conducted software audits.

Created and reported on software repository, including all metadata, scanning connected authorized devices, and vendor reporting.

Defined pre-screen, assessment and application processes and non-commoditized demands from the business.

Co-ordinated with other departments for all IT issues (such as address information security, data privacy and data protection) e.g. IoT device integration, Public Clouds usage with regulatory frameworks GDPR and PIPEDA

for average of 3 Mergers, Acquisition or divestitures a year (based upon 10-year average).

Compliance Consultant (IT Audit Assessor) (2007 – 2015) (Team -3)

Led and coordinated General and Application IT audits for Canada, USA and Mexico, including partnering with internal, and Big 4 external financial auditors. Audit team scope included validation of business and IT controls, disaster recovery and emergency business resumption for 35 countries.

Created and maintained IT Risk Registry

Provided training to Team as well Auditors.

Managed IT Security analysis and reporting of System and Application Controls

oAudited and assessed systems to ensure alignment to internal and external regulations (including SOA)

oWorked with SAS70/SSAE16/SOC1/SOC2 and SOD reports, on SAP systems

oProvided reporting and risk analysis of the SAP segregation roles for 3,000 users

oProvided training to other staff in Canada, USA, Mexico, Columbia and Brazil

oReceived three “Thank you” notes from Executive Management for IT Audits

* Average of 3 M&A or Carveouts per year for 10 years, ** Siemens Bank (SFS) was listed on NYSE

Sample Leads/Manages Projects Accomplishments:

Appointed by the CIO.

Implemented over 43,000 security patches on 22 SAP systems. Led project scheduling and post implementation status, health check reports, stakeholder communications and vendor communications.

Result: Achieved over 99.3% implementation in one year

Provided guidance for a hospital systems’ RFP: Collaborated with Senior Healthcare Management, Commodity buyers, Vendors, IT staff, Export Control, and Legal for Data Privacy and Protection.

Result: Won 15-year contract worth $ 154 Million

Appointed by the CIO and Director of Governance and IT Compliance.

Managed the company integration of all Business and IT processes for a 300-person Company with $ 120 million Sales annually sales.

Result: Completed on time and under budget with a reduction over 56% of the processes, generating over $100,000 savings in direct processing costs annually

Appointed by Director of Governance and IT Compliance

Project managed the integration of two companies in existing Healthcare. Redefined all existing processes for each company and integrated them into the existing Siemens process methodology and framework. Focus of the work was Procurement, Supply Chain Management, Service Management, IT and systems management and Finance.

Result: The three-year project plan was accomplished in two years through Harmonization, Standardization and Optimization of existing processes

Government of Ontario (Contract) 2004

Technology Architect II and Business Analyst

Managed all technical aspects of systems integration including design, infrastructure, application and system architecture for the 17 Ministries of the government. Identified and verified client needs updated requirements and deliverables and resolved issues between business and technical groups and vendors.

Participated in the RFP and RPI for replacing the existing systems.

GE Corporate, Connecticut (Contract – worked in USA with TN Visa – W2) 2003

Infrastructure Project Manager (Team 5)

Knowledge Domain: IT Security, SLA, SDLC, Team Management (Onshore and Offshore), PMBOK, Digitalization

Developed an application to manage over 10,000 assets/devices for several multinational subsidiaries with 2,500 locations, classified as Private, Public or Co-location.

Validated 12 Six Sigma Black Belts Business & IT processes deliverables. Tools employed included: RUP and RAD, process management tools ITIL and Six Sigma, MS-Office Suite (Visio, Word, Excel, PowerPoint and SharePoint).

Deloitte (Contract) 2002

IT Performance Architect

Performed a risk assessment for existing infrastructure and performance issues. Assessed the Vendor Mainframes and applications on shared platform vs the SLA and Service Delivery Lifecycle targets.

IBM (Consulting and Services) 1988-2002

Common Responsibilities:

All client communications, conflict resolution and compliance on client deliverables.

Reviewed all deliverables to ensure quality standards and client expectations were met consistently.

Managed internal and external escalations.

Led cross functional teams to complete global projects within deadlines.

Cloud Hosting (Network Specialist) – (Team 4)

oTeam Manager, Network tools for cloud and server hosting services deployment, monitoring and reporting

Solution Architect (Team 4):

oAccomplishments: Saved client over $ 8 million per annum by system optimization.

oTeam Manager for $ 12,000,000 operation annually. Developed and supported an N-Tier application allowing system integration and communication between several companies with a user base of 250,000 users located internationally.

Sample Clients/Projects: Olympics (1996 Atlanta and 1998 Nagano); Federal Trade Commission, Sears, Dean Witter, CBRA, Discover Card; All-State Insurance; Eaton’s, US Steel, Sears Roebuck, Accenture.

Senior Quality Assurance/DBA – Team of 63 – 2 Managers, 7 Team leads

oAccomplishments: Saved over $ 500,000/year through system optimization.

oManaged and supported an ERP-SCM database system which interfaced with Warehouse and Inventory Management Systems in USA and Canada. Managed at team of 63 people.

Various feedback for past projects

Management

“Manish is very hard worker and dedicated consultant and has deep knowledge on several IT subject matter perhaps more subject matters and deeper knowledge than most of his peers”

President of Consulting

Processes Management

“Either you can do it by yourself or you work with Manish. He will fireproof your processes, and guarantee you are not burned by the risk management side

X-CISO

“Manish is a type of person that can walk-in into an unknown situation, diffuse the problem and come up with a practicable workable solution…”

X-Sr. IT Project Manager for M&A

Auditing

“… thank you for your participation as a SOA tester. We understand that participation adds to your already substantial workload. We truly appreciated your efforts. You are a valued member of our SOA team. Your contributions are vital in assisting the company fulfill it Sarbanes-Oxley (SOA) requirement.”

X – CEO, CFO and SOA Officer

“Hello Auditors, …

Just wanted to let you know that I have completed reviewing the binder with Manish. Everything came back effectively. Manish did an absolutely excellent job of compiling the information.”

X - Risk and Internal Compliance Officer

Training

“… I have known of Manish since 2007. Although we have not worked closely with him in a business project together directly, I know that he is the guy behind our processes. I have always admired him both socially and for his business acumen. Recently I was able to attend a half day conceptual course on Aris that he led, and Manish was really good.”

X - IT procurement officer

M&A integration - $ 300 million company – delivered ahead of schedule

“Congratulations and thank you! Great achievement”

X - CIO

Technical Expertise, Methodologies and Frameworks

Methodologies and Frameworks: ISO 27001, ISO 38500, RUP, RAD, PMP, ITIL, Six Sigma, COBIT, COSO, Zachman Framework, PMBOK and SDLC

Operating Systems: zOS, MVS, VM, VMS Microsoft Windows, Unix (AIX, Linux)

Databases: DB2, RBASE, SQL

Communication and Languages: VTAM, CICS, JCL, SPUFI, SMF, Assembler, OVMVS, COBOL, PL/1, Fortran, C, C++, Java, C-Shell, Bash, BGP, SNMP, Ping, Trace route, Python

Software: Microsoft Office (Visio, Word, Excel Project, PowerPoint), ARIS (Java, Object based), Lotus Notes, Sharepoint, RACF

Contact this candidate