Roland Carandang

Roland Carandang is a Managing Director in our London office and a global leader in cyber security / resilience and technology innovation. Through his 20+ year career, he’s partnered with his clients from assessment to strategy and roadmap definition through to end-to-end service design and deployment, ongoing integration and technical support.

Roland works enthusiastically across sectors, applying lessons learned and collaborating with colleagues and clients to navigate the uniqueness of each organisation and situation.

He has a pragmatic approach to innovation meeting clients where they are in terms of agility.

REPRESENTATIVE ENGAGEMENTS

• Cyber strategy/architecture definition: Led multiple advisory engagements to assist CISOs and Enterprise Security Architects in the definition and refinement of overarching cyber strategy and for Zero Trust architecture.
• Cyber roadmap definition: Led the definition of multiple technology roadmaps covering, for example, the full range of user access management and data protection
• Cyber solution implementation: Assisted clients in the rapid, consistent and transparent realisation of benefits using a delivery methodology based on Agile PM, Agile software development, Lean (startup) and Design Thinking. Roland has partnered with Protiviti’s domain experts to deliver predictable releases across the key domains (governance, service model, technical architecture, business architecture and data management).
• Cyber security operations: Led a team of dedicated cyber security testers providing a managed security testing service including vulnerability scans, penetration testing and critical SaaS assessments.
• Operational Technology (OT) resilience: Led the definition and delivery of a tailored OT taxonomy and resilience approach for a global leader. Created a set of patterns for OT usage across the value chain capturing deviations in local markets. Quickly assessed capability and identified practical improvement opportunities which fed into a PMO.

AREAS OF EXPERTISE

• Cyber Security Strategy and Architecture
• Identity and Access Management
• Innovation in Cyber Security

INDUSTRY EXPERTISE

• Financial Services
• Consumer Products
• Pharmaceuticals
• Mining

EDUCATION & PROFESSIONAL AFFILIATIONS

• BSc. Drexel University: Management of IS
• Certified Information Systems Security Professional
• GIAC Certified Incident Handler
• ISO27001 Lead Implementer
• AgilePM Practitioner
• LUMA Institute Certified Practitioner of Human-Centred Design