Roland Carandang

Roland Carandang is a Managing Director in our London office and a global leader in cyber security, resilience and technology innovation. Through his 20+ year career, he has partnered with clients from assessment to strategy and roadmap definition through to end-to-end service design and deployment, ongoing integration and technical operations.

As a leader in Protiviti's European cyber and business resilience community and global C-suite community, Roland works across disciplines, geographies and industries to bring together the expertise, capabilities and insights needed to solve clients' most pressing cyber, resilience and technology challenges. His collaborative approach enables organisations to translate strategy into pragmatic, business-led outcomes.

Roland works enthusiastically across sectors, applying lessons learned and collaborating with colleagues and clients to navigate the uniqueness of each organisation and situation. He has a pragmatic approach to innovation, meeting clients where they are in terms of agility.

REPRESENTATIVE ENGAGEMENTS

• Cyber strategy and architecture definition: Led multiple advisory engagements to assist CISOs and Enterprise Security Architects in the definition and refinement of overarching cyber strategies and Zero Trust architectures.
• Cyber roadmap definition: Led the definition of multiple domain-level roadmaps covering, for example, the full range of user access management and data protection.
• Cyber solution implementation: Assisted clients in the rapid, consistent and transparent realisation of benefits using a delivery methodology based on Agile PM, Agile software development, Lean Startup and Design Thinking. Roland has partnered with Protiviti's domain experts to deliver predictable releases across key domains including governance, service model, technical architecture, business architecture and data management.
• Cyber security operations: Led a team of dedicated cyber security testers providing a managed security testing service, including vulnerability scanning, penetration testing and critical SaaS assessments.
• Operational Technology (OT) resilience: Led the definition and delivery of a tailored OT taxonomy and resilience approach for a global organisation. Created a set of patterns for OT usage across the value chain, capturing deviations in local markets. Assessed capabilities, identified practical improvement opportunities and helped establish a programme roadmap for ongoing resilience improvements.

AREAS OF EXPERTISE

• Cyber Security Strategy and Architecture
• Identity and Access Management
• Innovation in Cyber Security

INDUSTRY EXPERTISE

• Financial Services
• Consumer Products
• Pharmaceuticals
• Mining

EDUCATION & PROFESSIONAL AFFILIATIONS

• BSc. Drexel University: Management of IS
• Certified Information Systems Security Professional
• GIAC Certified Incident Handler
• ISO27001 Lead Implementer
• AgilePM Practitioner
• LUMA Institute Certified Practitioner of Human-Centred Design