Pierre Kapange

Senior IT Governance, Risk & Compliance (GRC) professional with extensive experience leading enterprise IT governance, risk management, compliance, and control initiatives across complex environments. Proven ability to design and strengthen frameworks, oversee policy and control ownership, coordinate audits, manage remediation efforts, and advise IT leadership and business stakeholders on regulatory, contractual, and internal control requirements. Known for driving consistency, accountability, and transparency in risk management while aligning IT practices with business objectives and industry standards.

Senior GRC Consultant - Exxilon Delivery/ Kapa1 Homestead - Bridgeport, Connecticut, United States · Remote

(2023-01)

• Conducted regular vulnerability assessments using Qualys, reducing the overall risk exposure by 26%.
• Developed comprehensive antivirus and anti-malware strategies, which decreased malware incidents by 41%.
• Led 5 threat modeling exercises that identified key attack vectors, resulting in the development of risk mitigation strategies.
• Implemented a comprehensive log monitoring and analysis system and cut incident response time by 32%.
• Developed targeted recommendations that reduced security-related expenditures by 15% while enhancing system protection for operations.
• Guided clients through the planning, design, configuration, and transition phases of governance, risk, and compliance programs using CyberGRC tool, ensuring alignment with specific business objectives and risk tolerance levels.
• Assess technical and procedural security controls for maturity and compliance against industry standards such as ISO/IEC 27001, NIST SP 800 53, and PCI DSS.
• Analyzed privacy practices for GDPR compliance, identified 5 key gaps, and recommended targeted improvements that successfully mitigated regulatory risk and ensured compliance with data protection standards.
• Designed and developed security governance policies and processes tailored for 10+ clients, supporting compliance objectives such as ISO/IEC 27001 certification.
• Established strong relationships with 10+ client stakeholders, delivering tailored presentations using PowerPoint and comprehensive reports to address audience-specific needs.
• Actively developed and refined GRC service delivery methodologies and best practices, resulting in streamlined processes for client engagements.

Senior Enterprise Architect/GRC Consultant - Go Cloud Architect - Florida, United States

(2021-10 - 2025-02)

• Enterprise-wide view of the business processes and capabilities
• Aligns strategic goals and objectives with products, services, and resources.
• Ability to apply architectural principles to business solutions.
• Enables technologies and governance in support of capabilities.
• Encapsulate the current maturity of the business capabilities and manage the essential transformation to continually increase maturity in alignment with strategic goals.
• Define the strategic core and support processes of functional and organizational entities.
• Provide direction on operationalizing the organization’s business strategy including the system, processes, and data required.
• Provide a roadmap of organizational redesign and change consistent with the direction and overall strategic vision.
• Delivered technical presentations to internal and external clients.
• Designing of high availability systems.
• Documenting the design of mission-critical systems in both written, diagram, and presentation formats.
• Assisted in sales with sales collateral, meetings, and presentations.
• Collaborated with partner organizations related to customer designs, implementations, and support.
• Delivered technical training sessions to customers on customized solutions created by New Horizons and partner organizations.
• Mentored engineers on system design, implementation, and troubleshooting
• Functioned as an escalation point for the technical support center - provided guidance and leadership for critical customers.
• Authored books for the AWS Certified Solutions Architect Associate and AWS Certified Solutions Architect Professional Exams
• Authored books: Positiveness – Building The Positive Attitude and Positiveness: Building The Positive Attitude. A Practical Guide To Building A Profitable Attitude
• Coaching of cloud computing technologies AWS, GCP, AZURE
• Presentation coaching for cloud architects

Senior Cloud Enterprise Architect - Express Professional Employment/ Kapa1 Homestead LLC - Shelton, Connecticut, United States · Hybrid

(2020-10 - 2025-01)

• Audit and evaluate business architecture, business capability mapping, business process modeling, and business transformation.
• Specializes in designing and implementing cloud-based solutions aligned with business strategies and goals.
• They bridge the gap between business objectives and cloud technology, ensuring that cloud solutions effectively meet the needs of the organization.
• Cloud Strategy Development and working closely with stakeholders to understand business requirements, goals, and challenges.
• Develop a cloud strategy that aligns with the organization's vision and objectives, considering factors such as scalability, cost-efficiency, security, and regulatory compliance.
• Cloud Solution Design cloud architectures and solutions that optimize performance, scalability, and reliability.
• Consider various cloud service models (Infrastructure as a Service, Platform as a Service, Software as a Service) and deployment models (public, private, hybrid) to create the most suitable solution for the organization's needs.
• Cloud Service Selection by evaluating and selecting appropriate cloud services and providers based on specific business requirements.
• Consider factors such as service capabilities, pricing models, security measures, compliance certifications, and vendor reputation to make informed decisions.
• Cloud Migration and Integration by planning and executing the migration of applications, data, and infrastructure to the cloud environment.
• Assess existing systems, identify dependencies, and develop migration strategies to ensure a smooth transition. They also focus on integrating cloud services with existing on-premises systems or third-party applications.
• Cost Optimization by optimizing cloud costs by identifying opportunities for resource consolidation, right-sizing instances, leveraging spot instances or reserved capacity, and implementing cost monitoring and reporting mechanisms.

Founder, Pastor - Christian Family Network - Bridgeport, Connecticut, United States · Hybrid

(2010-01)

• Multifaceted and encompasses various responsibilities within a religious community.
• Spiritual Leadership: Serves as a spiritual leader, guiding and nurturing the spiritual growth of the congregation. Involves preaching and teaching the Word of God, providing pastoral care and counseling, and facilitating worship services and sacraments.
• Shepherd and Counselor: Serves as a shepherd, caring for the well-being of the congregation. Offer guidance, support, and counseling to individuals and families in times of joy, grief, crisis, or personal challenges. Provide a compassionate ear and offer biblical wisdom and encouragement.
• Community Builder: Fostering a sense of community within the church. Encourage fellowship among the congregation, facilitate small groups and ministries, and promote unity and harmony among the members. Create opportunities for mutual support, connection, and growth.
• Visionary and Strategic Planner: Provide vision and direction for the church. Work with church leaders and the congregation to discern God's will and develop a strategic plan for the ministry. Set goals, cast a vision for the future, and lead the congregation toward fulfilling the mission of the church.
• Preacher and Teacher: Proclaim and explain the Scriptures. Deliver sermons, Bible studies, and teachings that help the congregation understand and apply the Word of God to their lives. Provide biblical teaching that educates, inspires, and challenges individuals to grow in their faith.
• Administrator and Organizer: Oversee the administrative aspects of the church, including managing budgets, coordinating events and programs, and supervising staff and volunteers. Provide leadership in the day-to-day operations of the church and ensure that the ministry runs smoothly.
• Evangelist and Missionary: Evangelism and outreach, sharing the good news of Jesus Christ with those who have not yet believed.

Associate Cloud Architect - Express Professional Employment/ Pitney Bowes Inc. - Shelton, Connecticut, United States · On-site

(2017-10 - 2020-10)

• Responsible for designing and implementing cloud-based enterprise solutions within an organization.
• Aligning cloud initiatives with the overall enterprise architecture and driving business transformation.
• Cloud Strategy and Planning with business leaders and IT stakeholders to develop a comprehensive cloud strategy aligned with the organization's goals and objectives.
• Assess the current IT landscape, identify areas for cloud adoption, and define the roadmap for cloud migration and transformation.
• Ensure that cloud solutions align with the enterprise architecture framework.
• Integrate cloud technologies seamlessly with existing systems, applications, and infrastructure by considering factors such as scalability, security, interoperability, and data governance to maintain consistency and coherence across the enterprise.
• Design cloud architectures that meet business requirements and leverage the benefits of cloud computing.
• Select appropriate cloud service models (IaaS, PaaS, SaaS) and deployment models (public, private, hybrid) based on functional and non-functional requirements. They design resilient, scalable, and secure cloud solutions using best practices and industry standards.
• Cloud Governance and Compliance by establishing governance frameworks and policies to ensure effective management and control of cloud resources.
• Define processes for cloud service provisioning, usage, monitoring, and compliance.
• Ensure adherence to security standards, regulatory requirements, and data privacy regulations.

Senior Information Security Analyst - Global Wireless Solutions Inc./AT&T Nationwide - Albuquerque, NM · Remote

(2010-08 - 2017-10)

• Evaluate and bring to update the System Security Plan (SSP), Risk Assessment (RA), Privacy Impact Assessment (PIA), System Security Test and Evaluation (ST&E), and the Plan of Actions and Milestones (POA&M)
• Support System Owners and ISSO in preparing for the certification and Accreditation package for companies' IT systems.
• Evaluation of Security Controls and enable the management, operational, and technical team to understand and comply with security requirements according to NIST SP 800-53 R4
• Create systems and categorize them according to C.I.A based on FIPS 199 and NIST SP 800-60
• Conduct a Self-Annual Assessment based on the NIST SP 800-53A
• Perform Vulnerability Assessment.
• Created guideline templates for required security assessment.
• Conducted controls risk assessments that included reviewing organizational policies, standards, and procedures and provided advice on their adequacy, accuracy, and compliance with the Payment Card Industry Data Security Standard
• Perform IT risk assessment and document the system security key controls.
• Meet with the IT team to gather evidence, develop test plans, and testing procedures, and document test results and exceptions.
• Create and Conduct walkthroughs, formulate test plans, and test results and develop remediation plans for each area of the testing.
• Create audit reports for distribution to management and senior management documenting the results of the audit.
• Develop a Business Continuity Plan and liaison with vendors.
• Evaluate the client’s key IT processes such as change management, and systems development

QA Test Analyst & Business Analyst - MedStar Health - Baltimore, Maryland, United States · On-site

(2006-08 - 2010-07)

• Analyzed business requirements using BRD.
• Developed Test cases, Test scenarios, and Test scripts based on business requirements.
• Involved in coordinating with developers, BA, and SME.
• Conducted Bug Review meetings with developers and SMEs.
• Performed rigorous manual testing such as GUI testing, Black box testing, Integration testing, and System Testing.
• Tested Members Accumulator module for Medicare members for benefits.
• Analyzed and tested HIPAA 4010 and 5010 standards for 837P EDI X12 transactions, related to providers, payers, subscribers, and other related entities.
• Tested the HIPPA EDI 837/835 transactions according to test scenarios and verify the data on different modules.
• Tested XML-generated data.
• Participated in defects review and Test Readiness meetings on a weekly basis.
• Interacted with business users for any updates on the Requirements of these projects.
• Worked on EDI 837, 834, and 850 and Performed UAT both as a QA
• Designed the Test Plan for all the phases of Testing followed by the Project Plan followed by Agile Methodology.
• Logged defects in Quality Center and reported to developers and business analysts on a daily basis.
• Analyzed business requirement docs for different modules of an application.
• Prepared the verification checklist to be followed in the various stages of the application under testing.
• Prepared Use Cases for different workflows for different departments of the business.
• Prepared test data for executing test cases manually.
• Tested database of Legacy System using Microsoft SQL Server for checking the integrity of the database
• Identified the test scenarios followed by the Use Case documents.
• Interacted with Lead to follow up on Defects/Issues.
• Conducted the defect reviews to assign the defect severity and priority for the defects reported in the project.

AS - Sciences - University of Maryland Baltimore County, Maryland (2001 - 2001)

AAS - Biotechnology - University of Maryland Baltimore County, Maryland (2001 - 2001)

BA - Modern Language and Linguistics - University of Maryland Baltimore County, Maryland (2005 - 2005)

MBA - Sales - International MBA Institute (2021 - 2021)

MBA - Marketing - University of Maryland University College, Maryland (2027)