Pranav Shah

Director, Technology & Cyber Risk Governance @Tangerine

Develop an integrated and collaborative view with the business and technology leadership on the technology risk, Audit, Compliance and cyber security controls. • Identify, assess, prioritize and report on material key Technology risks. Ensure Technology and Cyber risks are within company\'s risk appetite framework. • Develop risk strategies and manage KRI for technology governance and risk function. • Assist risk owners in adhering to policies, frameworks, standards and guidelines through active engagement, guidance and counselling. • Act as a primary interface with audit team to manage scope, quality of responses, and interactions with internal and external auditors/regulators. Plan for upcoming audits with various stake holders and Audit teams. • Implemented and provided oversight of controls library for various regulatory standards. e.g. NIST CSF, PCI, SOX etc. Also implemented evidence library to improve Audit efficiency. Manage audit issue remediations. • Advise on the design of controls and remediation plans to mitigate risk. Perform control testing to manage compliance. • Provide peer review of Threat Risk Assessments (TRA) for all projects and new initiatives. • Develop dashboards for IT Risk assessments and outputs in enterprise GRC tools. Assure that it is done in full compliance of all policies and common standards, including the IT Risk Management Policy and Framework. • Ensures implementation of a strong IT risk culture in partnership with the risk owners. • Balance competing or conflicting goals of various departments and stakeholders which requires a mature, diplomatic approach and highly developed negotiation and influencing skills. • Develop communication strategies for executive approval through to implementation of strategies and programs. Extensive IT Risk management experience in systems design, security, availability, disaster recovery, third party risk management, change management, release management, cloud and DEVSECOPS.