Rom Sarpand

Directed strategy, program management, operations, and team leadership for the Enterprise Application Security program, providing security testing and vulnerability management coverage across 1,000+ internally developed application assets. Advanced enterprise AppSec capabilities and led modernization of the Application Security technology ecosystem.

Served as a senior security advisor and led cyber risk advisory for the SingleFamily Division's Business Technology Office, translating enterprise security requirements, CISO priorities, and business objectives into actionable, business-aligned security strategy. Integrated enterprise cybersecurity initiatives, regulatory requirements, and control objectives into divisional technology planning and

Led enterprise IAM and Identity Governance & Administration (IGA) operations covering 150+ high-risk applications and 12 core infrastructure platforms, including access provisioning, privileged access, roles and entitlements, and access certification. Directed enterprise-wide access certification and revocation campaigns using SailPoint IDMS and drove key elements of the enterprise SailPoint IIQ t

Led enterprise risk-based access certification and recertification activities across 25,000+ accounts and resources spanning 180+ applications and platforms, affecting approximately 75% of the enterprise user population and supporting SOX, ITGC, and corporate security requirements. Supported enterprise migration to SailPoint IIQ and strengthened audit/control execution through requirements develop

Executed enterprise privileged-access certification and control activities and contributed to re-engineering IT General Controls (ITGCs), supporting remediation of two Significant Deficiencies.

Pursued a Master of Business Administration (MBA) at the Graduate School of Management and Technology.

Earned a Bachelor of Science in Information Technology with a concentration in Information Security and Network Administration.