Apr 2023 – Apr 2026 · 3 yrs · Auckland, New Zealand

• Served as Board member and policy committee member during my tenure with MS Auckland. Refreshed the full policy set, contributed to setting strategy, and provided guidance to MS Auckland management in terms of technology best practice that is fit for its context.

Jan 2023 – May 2023 · 4 mos · Auckland, New Zealand

• My role involved managing compliance, as one of four workstreams, in the overall project’s delivery, including confirmation of relevant risk and compliance requirements and ensuring that these requirements are successfully delivered in the newly created modules, within the chosen technology solution.

Aug 2021 – Jan 2023 · 1 yr 5 mos · Auckland, New Zealand

• As risk partner to the 'Projects and Change' and 'Innovation and Technology' functions, I provided ongoing advice, guidance and education, and influenced strategic and management technology decision-making. My role also included other technology risk management components such as leading external technology audits, incident management support, cloud risk assessments, and ownership of the ISMS artefact set. I also chaired the ‘Privacy and Security’ Forum for most of my tenure, however my official role in this regard was secretariat.
• Key achievements:
• Creation of a central SharePoint hub for all things technology risk to enhance engagement and transparency
• Redesign of the Cloud Risk Assessment process to alleviate common pain points
• Successful accreditation of all tech audits, including ISO 27001, ITGC, WLA-SCS and PCI-DSS (Uplift from Level 2 to 1)
• Active participation within the Diversity & Inclusion Committee

Dec 2020 – Aug 2021 · 8 mos · Auckland, New Zealand

• My role encompassed technology risk, where I led maturity uplift discussions from both the strategic and tactical perspectives across all technology teams with the aim of creating actionable roadmaps. Other aspects of my role that aligned to risk management included risk reviews and assessments, reviews of the control framework itself as well as its implementation and effectiveness, technology issue management, and leading external technology audits.
• Key achievements:
• Managed the first collective technology risk assessment, resulting in improved buy-in and a richer risk register

Oct 2017 – Dec 2020 · 3 yrs 2 mos · Wellington & Wairarapa, New Zealand

• As a consultant in the Operational Advisory team, my role was varied. I had a generalist component in my role which involved me in some business advisory, process improvement and internal audit engagements. On the technology side I was involved in varied engagements as well, including facilitation of strategy workshops, cybersecurity attestation/advisory/assessment/maturity pieces, technology project assurance such as IQAs (health checks) and post implementation reviews, business case to vendor selection system acquisition support, as well as various technology process assessments, e.g., change management.
• Key achievements:
• Took ownership of Corporate Social Responsibility (CSR) for the Wellington office, where I worked to uplift its CSR initiatives to maximise impact
• Built a practical COBIT- based technology maturity assessment toolkit

Sep 2014 – Sep 2017 · 3 yrs · Pretoria Area, South Africa

• In this role, I was subcontracted to the South African National Roads Agency in a greenfield role. This allowed me the opportunity to not only perform, but also design the audit process associated with its billing system’s accuracy.
• Key achievements:
• Built data analysis capability to consistently highlight system discrepancies for further investigation

Nov 1999 – Sep 2014 · 14 yrs 10 mos · South Africa

• I spent a number of years working in both hospitality and retail roles, the latter included store management and team leadership.
• Thereafter, I fulfilled a variety of roles in finance departments, from accounts payable to accounting, which also included team lead responsibilities.