Berk Algan
Details
Risk Management
Harvard Business School Executive Education
2021 : 2021
MBA
Business Administration
University of California, Berkeley, Haas School of Business
2003 : 2005
BS
Management Engineering
Istanbul Technical University
1996 : 2000
High School Diploma
Science, German, English
German High School - Istanbul
1988 : 1996
At vCRO, we deliver exceptional fractional Chief Information Security Officer (aka vCISO) services to small to mid-size companies. As the vCISO of your company, we provide specialized expertise, improved security program management, and stronger organizational security posture for less than the cost of a full-time CISO.
Our vCISO services are highly customizable for your organization's needs.
Please check us out at https : //www.virtualcyberriskoffice.com/
2023 : Present
Virtual Cyber Risk Office
Managing Owner & Principal Consultant
Under the umbrella of vCRO, I am serving as fractional Chief Information Security Officer at Meridian. I am developing and implementing Meridian's security program, policies, standards and tooling based on cyber security best practices.
Meridian brings the world closer together so friends and family can send more money home. Meridian empowers people to send remittances across borders with carriers and wallets they already know and trust. We’re creating a unified network of telecoms and digital wallets to make sending money seamless.
The team behind Meridian is made up of technology, finance, and risk experts from Apple, Square, Revolut, and Visa.
2023 :
Meridian
Chief Information Security Officer (vCISO)
I established a new function to oversee SVB's 1st Line of Defense regulatory engagement model and interactions with bank examiners. My team was responsible for facilitating bank-wide regulatory examinations and directing all interactions with regulatory agencies across various domains.
2021 : 2023
Silicon Valley Bank
Head of Regulatory & Audit Engagement
Side by side with my amazing team (about 40 people at its peak), I manage SVB's technology, security, business continuity and vendor risk while contributing significantly to the enterprise-wide risk management efforts. We ensure compliance with US and international regulations in our domain and govern the bank's relationship with regulators.
I oversee and run governance committees, prepare and present executive reports to C-level executives, the Board and regulators.
As Head of Governance, Risk & Compliance, I assumed additional responsibilities for Business Continuity Management (BCM), and Vendor Management. My role has also become increasingly global spanning across the US, EMEA, and Asia, and my team continues to grow in various SVB locations.
2020 : 2021
Silicon Valley Bank
Head of Governance, Risk & Compliance
In this role, I developed, ran, optimized and oversaw governance, risk and compliance processes for the Chief Operating Officer (COO) and the functions that report into him.
My areas of responsibility :
- Strategic Planning & Goal Setting
- Regulatory Compliance with global and US regulations and standards (FFIEC, SOX, GDPR, GLBA, PCI, SWIFT etc.)
- Risk Management (Risk Identification, Assessments, Treatment, Reporting)
- Cyber Security & IT Governance
- Operations Risk
- Vendor & Client Risk Management
- Regulatory Exam & Audit Management (Federal Reserve, SOX, PCI, GLBA etc.)
- Performance Management, Measurements & Reporting
- Global Governance (Committees, Policies/Standards, RACIs, Working Models)
- IT Service & Process Optimization
- Technology Business Management & Cost Transparency
- Solution Delivery Lifecycle (SDLC) Process Governance
- Talent Development & Training
- Communications & Organizational Change Management
I led and participated in SVB-wide committees/councils including the IT Steering Committee (founding member), Corporate Compliance Committee, Risk Management Committee, Identity & Access Management Council (co-chair) and Transformation Office Advisory Committee.
2018 : 2020
Silicon Valley Bank
Senior Director, Governance, Risk & Compliance | Technology, Security & Operations Risk Officer
Skills
Audit, Auditing, Business Process, Business Process Improvement, COBIT, Compliance Auditing, Compliance Management, Corporate Governance, COSO, Due Diligence, enterprise risk management, ERP, executive-level communication, ffiec, Information Security, information security governance, information technology, Internal Audit, ISO 27001, IT & Business Strategy Alignment, IT Audit, it compliance, it governance, ITIL, itil implementation, IT Project & Program Management, IT Risk Management, IT Strategy, nist 800-53, OCTAVE, operational risk management, Privacy Compliance, Project Management, public speaking, regulatory compliance, Regulatory Standards, Risk, Risk Assessment, Risk Management, Risk Reduction, Sarbanes-Oxley, Sarbanes-Oxley Act, SAS70, Security, Security Compliance, soc 1, SSAE 16, Strategic IT Management, Supplier Risk Management, Team Building, SOX, Financial Risk, CISA, Penetration Testing, corporate blogging, Enterprise Risk
About
I am a seasoned cyber security risk executive and recovering ex-auditor known for delivering outstanding cyber security and technology risk management processes.
With over 23 years of experience in cyber and technology risk management (almost evenly split between Big 4 and financial services), I remain a dedicated lifelong learner of this space. I work with experts in various domains in the cyber security and risk management space to deliver exceptional services to my clients.
I hold an MBA degree from UC Berkeley and a Risk Management for Corporate Leaders Certificate from Harvard Business School. My professional certifications include CISA, CRISC, CGEIT, CIPP, AWS, CDPSE, and ITIL.