Dave Lanoue

About Dave Lanoue

Strategic thinker, leader and utility player with multi-national, multi-cultural sensitivity that empowers teams of 2 to 200. Manage project and service portfolios, and enterprise architecture supporting organizational strategy and information risk management. Passionate about applying business, financial, technical and risk management acumen to analyze and decompose complex challenges and communicate among customers, engineers, suppliers, partners and executives. Strong results orientation and experience in defining and achieving outcomes and reaching consensus. Accountable for execution from concept to launch and closure. Key capabilities include: Information Risk Management Enterprise architecture & delivery: TOGAF Agile (scrum, kanban, scrum-ban), lean-six/sigma, SDLC; Strategy, planning and implementation Architecture, project and program delivery frameworks, and program management office (PMO) Team building, change management and personnel management

Experience

1. Director, Information Risk Management

   MUFG

   Jan 2017 — Present · Tempe, AZ, US

   Report to Managing Director, hired as Vice President, promoted to Director to staff, implement and manage information risk assessments team within MUFG’s Second Line of Defense (SLoD). Responsible for: • Risk and Controls Self-Assessment (RCSA)• Targeted application information and cybersecurity risk assessments• Controls design and effectiveness testing, review & challenge of 1st Line testing• Corrective Action Monitoring (MRA, MRIA, MOU and Consent Order)• Annual FFIEC-Cybersecurity Assessment Tool assessments• Annual payment systems assessments and attestations; SWIFT, FedLine, Daylight Overdraft, CHIPS• Applicable laws/rules/regulatory assessments; GLBA and PCI-DSS• Control families and controls (NIST, CRI, CoBIT)

Education

• Thunderbird School of Global Management

  Master, International Business Management

  1996 — 1998

• University of Massachusetts Lowell

  BSEE, Electrical Engineering & Mathematics

Skills

• IT Strategy
• Enterprise Architecture
• Program Management
• Software Development Life Cycle (Sdlc)
• Integration
• Strategy
• Solution Architecture
• Management
• Business Analysis
• Product Management
• Leadership
• Information Technology
• Outsourcing
• IT Policy & Standards Management Frameworks
• Cloud Computing
• IT Outsourcing
• Project Portfolio Management
• Business Process Improvement
• Business Intelligence
• IT Management
• Enterprise Software
• Business Process
• Consulting
• Vendor Management
• Pmo
• Data Center
• Infrastructure
• Software Project Management
• Practices
• Governance
• Reference Architecture
• Business Services
• Contract Negotiation
• IT Operations
• Togaf
• Service Delivery
• Reference Architecture Practices
• Product Management Practices
• Business Transformation
• Intellectual Property Management