Summary
Overview
Work History
Education
Skills
Websites
Certification
Timeline
Generic

Noah S. Gottesman

Governance, Risk, And Compliance Executive
Rockville,MD

Summary

Detail-oriented GRC Executive bringing 21 years of experience assessing financial and technology documentation, recommending improvements and maintaining ongoing monitoring. Well-versed in using Cybersecurity and implementing statistical analysis techniques. Accomplished in handling dynamic needs with forward-thinking mindset and expert knowledge of IT and Cyber operations. Proficient in using independent decision-making skills and sound judgment to positively impact company success. Dedicated to applying training, monitoring and morale-building abilities to enhance employee engagement and boost performance.

Overview

22
22
years of professional experience
4
4
years of post-secondary education
2
2
Certificates

Work History

GRC Director

Skyline Technology Solutions
Glen Burnie, MD
02.2021 - Current
  • Liaison and oversee the Independent SOC 2 External Auditor in the performance of the annual SOC 2 Type 2 Audit.
  • Focused teams on developing innovative and cutting-edge approaches with effective resource allocation and strategic planning.
  • Built cross-functional relationships to support organizational change.
  • Defined governance roles and responsibilities to establish clear accountability for stewardship of principal information assets.
  • Defined performance indicators and quality metrics to maintain compliance with governing policies, standards and adoption requirements.
  • Established and executed governance implementation roadmap.

Cybersecurity Governance Policy & Standards, Senior Manager

Kforce Contractor @ Otis
Arlington, VA
06.2020 - 12.2020
  • Advised on the development of effective technology corporate policies (Bring-Your-Own-Device, End-User Agreement, and Supplier/Third-Parties) and IT governance as part of a $13.1 Billion global spin-off from UTC.
  • Designed company-wide policies to bring operations in line with Center for Internet Security (CIS) standards.
  • Created cybersecurity best practice communications to educate staff against known threats and potential vectors of attack.

Governance, Senior Director

COMSCORE
Reston, VA
10.2018 - 06.2020
  • Accelerated a technology risk and compliance function to define, mature, and enhance end-to-end data processes, IT governance, and security internal controls / KPIs across 53 Petabytes of data and over 80K data partner agreements.
  • Chaired a weekly data governance committee to review data rights and risk management decisions with Legal, Privacy, Information Security, Senior Management of Product / Solutions, Sales, and Strategic Partnerships.
  • Instituted formal operating procedures and enforced adherence to policies and regulations that impacted bottom-line.
  • Revamped operational plans to refocus staff and align processes with business objectives.
  • Established and executed governance implementation roadmap.
  • Drove strategic improvements to enhance operational and organizational efficiencies.

Risk Advisory Senior Director

SAI Global
Rockville, MD
10.2017 - 10.2018
  • Launched SAI Global’s US based Risk Advisory services, a management consulting effort, to enrich client usage of three SAI Global solutions and ethics/compliance training services.
  • Originated internal and external Integrated Risk Management / GRC knowledge sharing discussions developing over 621 net new leads over 7 months from 6 webinars, a total of $95K in valued opportunities.
  • Strategized and executed business plans for customer operations design, development and maintenance.

Executive Consultant

INDEPENDENT
Rockville, MD
01.2017 - 09.2017
  • Counseled a GRC / IRM vendor on the inclusion of 100+ specific enterprise risks statements and a single business process, risk, and control taxonomy for product demonstrations, marketing, and client materials.
  • Formulated a whitepaper on the effectiveness of using a graph-database to overcome disparate Enterprise Risk Management, Operational Risk Management, and other GRC operational areas.
  • Gathered, documented and modeled data to assess business trends.
  • Compiled research data and gave professional presentations highlighting finds and recommended optimizations.

Audit Advisor and Innovation Director

THOMSON REUTERS
Washington, DC
09.2012 - 12.2016
  • Managed the enterprise risk solution product lifecycle for three GRC products: Controls, Internal Audit, and Enterprise Risk Management products.
  • Directed and increased customer success by creating leading practice client reports, internal training, and other enabling approaches on the sale of GRC solutions to SOX, Internal Audit, and Risk Executives.
  • Established criteria for each milestone within product roadmap as means to measure developmental progress.
  • Conceptualized and deployed enhanced product features and optimized implementation for use in marketing strategies.
  • Consulted with buying personnel to determine projected demand for products and services.

Senior Manager

ERNST & YOUNG, LLP
McLean, VA
01.2001 - 09.2012
  • Advisory Services (Risk / IT, Twelve years of increased responsibility in serving as the business and technology Internal Audit, Controls, and Risk Management trusted advisor.
  • Originated a number of significant client winning pursuits both directly and indirectly by demonstrating EY’s Internal Audit, Controls, and Risk Management experience, capabilities, and investments in GRC methodology, technology, and knowledge management.
  • Delegated, planned, budgeted, and financially managed 100+ EY client engagement teams in all facets of Internal Audit, Control, and Risk Management activities ranging in complexity, size, geography, and simultaneous progress.
  • Updated system information, making appropriate changes to documentation.
  • Oversaw reporting functions to executive leadership.

Accounting Operations PMT Core Processor

JP MORGAN CHASE
Newark, DE
06.2000 - 12.2000
  • Administered standard general ledger maintenance for all JP Morgan US and international legal entities.
  • Performed daily general ledger analysis utilized necessary three reports to check for out-of-balance and overall average account balances.
  • Expanded to enhance internal control activities that improved accountability and transparency of general financial account maintenance.

Associate

ERNST & YOUNG, LLP, EY
McLean, VA
06.1999 - 05.2000
  • Tax Services, Expatriate Consulting Prepared expatriate and inpatriate tax calculations to minimize double taxation by employers on behalf of employees.
  • Served in a year-long internship with increased responsibility and client exposure in conjunction with EY Tax managers, senior managers, and partners.

Education

Bachelor of Science (BS) - Accountancy, Accounting

American University
Washington, DC
01.1996 - 01.2000

cation Certified Internal Auditor (CIA) - undefined

Certifi, The Institute of Internal

Skills

ISO 27001undefined

Certification

Business Transformation | Culture Building | Coaching | Process Redesign & Change Management |

Timeline

GRC Director

Skyline Technology Solutions
02.2021 - Current

Cybersecurity Governance Policy & Standards, Senior Manager

Kforce Contractor @ Otis
06.2020 - 12.2020

Governance, Senior Director

COMSCORE
10.2018 - 06.2020

Risk Advisory Senior Director

SAI Global
10.2017 - 10.2018

Executive Consultant

INDEPENDENT
01.2017 - 09.2017

Audit Advisor and Innovation Director

THOMSON REUTERS
09.2012 - 12.2016

Senior Manager

ERNST & YOUNG, LLP
01.2001 - 09.2012

Accounting Operations PMT Core Processor

JP MORGAN CHASE
06.2000 - 12.2000

Associate

ERNST & YOUNG, LLP, EY
06.1999 - 05.2000

Bachelor of Science (BS) - Accountancy, Accounting

American University
01.1996 - 01.2000

cation Certified Internal Auditor (CIA) - undefined

Certifi, The Institute of Internal
Business Transformation | Culture Building | Coaching | Process Redesign & Change Management |
Data Governance | Building Effective Teams | Dealing with Uncertainty and Ambiguity
Noah S. GottesmanGovernance, Risk, And Compliance Executive