Noah S. Gottesman
Governance, Risk, And Compliance Executive
Rockville,MD
Summary
Detail-oriented GRC Executive bringing 21 years of experience assessing financial and technology documentation, recommending improvements and maintaining ongoing monitoring. Well-versed in using Cybersecurity and implementing statistical analysis techniques. Accomplished in handling dynamic needs with forward-thinking mindset and expert knowledge of IT and Cyber operations. Proficient in using independent decision-making skills and sound judgment to positively impact company success. Dedicated to applying training, monitoring and morale-building abilities to enhance employee engagement and boost performance.
Overview
22
22
years of professional experience
4
4
years of post-secondary education
2
2
Certificates
Work History
GRC Director
Skyline Technology Solutions
Glen Burnie, MD
02.2021 - Current
- Liaison and oversee the Independent SOC 2 External Auditor in the performance of the annual SOC 2 Type 2 Audit.
- Focused teams on developing innovative and cutting-edge approaches with effective resource allocation and strategic planning.
- Built cross-functional relationships to support organizational change.
- Defined governance roles and responsibilities to establish clear accountability for stewardship of principal information assets.
- Defined performance indicators and quality metrics to maintain compliance with governing policies, standards and adoption requirements.
- Established and executed governance implementation roadmap.
Cybersecurity Governance Policy & Standards, Senior Manager
Kforce Contractor @ Otis
Arlington, VA
06.2020 - 12.2020
- Advised on the development of effective technology corporate policies (Bring-Your-Own-Device, End-User Agreement, and Supplier/Third-Parties) and IT governance as part of a $13.1 Billion global spin-off from UTC.
- Designed company-wide policies to bring operations in line with Center for Internet Security (CIS) standards.
- Created cybersecurity best practice communications to educate staff against known threats and potential vectors of attack.
Governance, Senior Director
COMSCORE
Reston, VA
10.2018 - 06.2020
- Accelerated a technology risk and compliance function to define, mature, and enhance end-to-end data processes, IT governance, and security internal controls / KPIs across 53 Petabytes of data and over 80K data partner agreements.
- Chaired a weekly data governance committee to review data rights and risk management decisions with Legal, Privacy, Information Security, Senior Management of Product / Solutions, Sales, and Strategic Partnerships.
- Instituted formal operating procedures and enforced adherence to policies and regulations that impacted bottom-line.
- Revamped operational plans to refocus staff and align processes with business objectives.
- Established and executed governance implementation roadmap.
- Drove strategic improvements to enhance operational and organizational efficiencies.
Risk Advisory Senior Director
SAI Global
Rockville, MD
10.2017 - 10.2018
- Launched SAI Global’s US based Risk Advisory services, a management consulting effort, to enrich client usage of three SAI Global solutions and ethics/compliance training services.
- Originated internal and external Integrated Risk Management / GRC knowledge sharing discussions developing over 621 net new leads over 7 months from 6 webinars, a total of $95K in valued opportunities.
- Strategized and executed business plans for customer operations design, development and maintenance.
Executive Consultant
INDEPENDENT
Rockville, MD
01.2017 - 09.2017
- Counseled a GRC / IRM vendor on the inclusion of 100+ specific enterprise risks statements and a single business process, risk, and control taxonomy for product demonstrations, marketing, and client materials.
- Formulated a whitepaper on the effectiveness of using a graph-database to overcome disparate Enterprise Risk Management, Operational Risk Management, and other GRC operational areas.
- Gathered, documented and modeled data to assess business trends.
- Compiled research data and gave professional presentations highlighting finds and recommended optimizations.
Audit Advisor and Innovation Director
THOMSON REUTERS
Washington, DC
09.2012 - 12.2016
- Managed the enterprise risk solution product lifecycle for three GRC products: Controls, Internal Audit, and Enterprise Risk Management products.
- Directed and increased customer success by creating leading practice client reports, internal training, and other enabling approaches on the sale of GRC solutions to SOX, Internal Audit, and Risk Executives.
- Established criteria for each milestone within product roadmap as means to measure developmental progress.
- Conceptualized and deployed enhanced product features and optimized implementation for use in marketing strategies.
- Consulted with buying personnel to determine projected demand for products and services.
Senior Manager
ERNST & YOUNG, LLP
McLean, VA
01.2001 - 09.2012
- Advisory Services (Risk / IT, Twelve years of increased responsibility in serving as the business and technology Internal Audit, Controls, and Risk Management trusted advisor.
- Originated a number of significant client winning pursuits both directly and indirectly by demonstrating EY’s Internal Audit, Controls, and Risk Management experience, capabilities, and investments in GRC methodology, technology, and knowledge management.
- Delegated, planned, budgeted, and financially managed 100+ EY client engagement teams in all facets of Internal Audit, Control, and Risk Management activities ranging in complexity, size, geography, and simultaneous progress.
- Updated system information, making appropriate changes to documentation.
- Oversaw reporting functions to executive leadership.
Accounting Operations PMT Core Processor
JP MORGAN CHASE
Newark, DE
06.2000 - 12.2000
- Administered standard general ledger maintenance for all JP Morgan US and international legal entities.
- Performed daily general ledger analysis utilized necessary three reports to check for out-of-balance and overall average account balances.
- Expanded to enhance internal control activities that improved accountability and transparency of general financial account maintenance.
Associate
ERNST & YOUNG, LLP, EY
McLean, VA
06.1999 - 05.2000
- Tax Services, Expatriate Consulting Prepared expatriate and inpatriate tax calculations to minimize double taxation by employers on behalf of employees.
- Served in a year-long internship with increased responsibility and client exposure in conjunction with EY Tax managers, senior managers, and partners.
Education
Bachelor of Science (BS) - Accountancy, Accounting
American University
Washington, DC 01.1996 - 01.2000
cation Certified Internal Auditor (CIA) - undefined
Certifi, The Institute of Internal
Skills
ISO 27001ITILMitre Att&Ck FrameworkNIST Cyber Security FrameworkNIST SP 800-53 r4 / r5Risk Management FrameworksSystem and Organization Controls (SOC)The Open GroupWaterfallWindows, Windows Server, Linux, MacOSBash, JSON, XML, Python, DjangoArangodb, Cassandra, CouchdbMongoDb, Neo4j, SQLDeltek, EPIC, Infor, Oracle, QuickbooksSAP, WorkdayRSA GRC, SAI Global, Bwise, Refinitiv GRCServiceNow, Archer GRCAWS, Azure, Google CloudLibreOffice, Microsoft 365, E-Discovery
Issues resolution
Verbal and written communication
Project Management
Rules and regulations
Strategic planning
Budgeting
Strategies and goals
Contract Management
Staff Management
Staff Development
Certification
Business Transformation | Culture Building | Coaching | Process Redesign & Change Management |
Timeline
GRC Director
Skyline Technology Solutions
02.2021 - Current
Cybersecurity Governance Policy & Standards, Senior Manager
Kforce Contractor @ Otis
06.2020 - 12.2020
Governance, Senior Director
COMSCORE
10.2018 - 06.2020
Risk Advisory Senior Director
SAI Global
10.2017 - 10.2018
Executive Consultant
INDEPENDENT
01.2017 - 09.2017
Audit Advisor and Innovation Director
THOMSON REUTERS
09.2012 - 12.2016
Senior Manager
ERNST & YOUNG, LLP
01.2001 - 09.2012
Accounting Operations PMT Core Processor
JP MORGAN CHASE
06.2000 - 12.2000
Associate
ERNST & YOUNG, LLP, EY
06.1999 - 05.2000
Bachelor of Science (BS) - Accountancy, Accounting
American University
01.1996 - 01.2000
cation Certified Internal Auditor (CIA) - undefined
Certifi, The Institute of Internal