Fintech sale readiness
Drove strategy, SOC 2 Type II and control frameworks to position a fintech business for sale to a State-Investor.
Remy Monadian
Board-level advisory on AI, digital transformation, cyber security, audit, risk, governance and compliance
20+ years advising boards, audit and risk committees and executive teams on cyber security, audit, compliance and GRC, now extended to generative and agentic AI. Clear decision rights, controls and accountability, delivered hands-on.
- Open to relocation worldwide
- Available from 1 November 2026
AI
Policies, risk tiers and approval gates for AI, LLMs and agents.
How I help fit AI into your organisation
Discover
Find where AI, LLMs and agents are already used, including shadow AI, and who owns them.
Design
Set the governance: risk tiers, acceptable use, decision rights and the target operating model.
Embed
Build approval gates, security controls, audit and compliance into the way you already work.
Assure
Report to the board and give auditors the evidence, so AI stays safe as it scales.
- 20+years of advisory
- USD 879Min project value delivered, with cost savings
- 0significant audit findings across six clean SOC 2 reports
- 6executive awards and recognitions
Where I advise
Digital Transformation & AI governance and agent oversight
Policies, decision rights, risk classification and approval gates for AI systems and agents. Inventory, lifecycle and non-human identity governance. Shadow AI containment.
AI cyber security and LLM risk
Securing LLM and ML systems: prompt injection, data poisoning, model integrity, agent orchestration security, least privilege for agents and AI incident response.
Board, Audit and Risk Committee advisory
Independent counsel to boards, audit committees, risk committees and executive committees on cyber, technology and AI risk, with reporting they can act on.
Audit and assurance
Audit readiness and assurance reports, including clean SOC 2 Type II delivery. Control testing, evidence and closure of findings with internal and external auditors.
Governance, risk and compliance
NIST CSF, ISO 27001, SOC 2, GDPR, NIS2, DORA, ECB and SOX ITGC. Control design, testing and regulatory readiness.
Architecture Board and design authority
Advice to architecture boards and design authorities on security architecture, secure-by-design decisions, technology standards and the target operating model for AI and transformation.
Security strategy and detection
Enterprise security operating models, Zero Trust, SOC and cyber resiliency, SIEM and Microsoft Sentinel across Azure, AWS and GCP.
Transformation and M&A
Security-by-design in large SAP S/4HANA programmes, Day-1 integration, divestiture and post-merger security leadership.
Successful delivery of hyper-projects / large programmes
1.2M+ programme man-hours
Day-1 merger integration
Directed security and technology integration for the multi-billion-euro LeasePlan, ALD and Société Générale (Ayvens) merger. Aligned to ECB, NIST CSF and ISO 27001 with zero major findings.
SAP S/4HANA at global scale
Led and supported major SAP S/4HANA deployments, with multi-million budgets and a 150k+ licence footprint, with security-by-design and governance embedded.
Global SOC and resiliency
Built and led the global Cyber Defense SOC. Invoked enterprise BCP/DRP in 2020, enabling company-wide remote working.
Experience
Disciplines that overlap and compound: controls and audit, cyber and SOC, management, and now AI and OT advisory.
SOX, ITGC and controls (NIST)18 yrs
Assurance and advisory18 yrs
Cyber experience15 yrs
Management (leading large teams)15 yrs
SOC management10 yrs
IT and OT6 yrs
AI management and LLM4 yrs
200820122016202020242026
Flexible by design, Organisational fitPermanent executive, interim head, fractional vCISO, board advisor or programme lead, on site or remote.
Fractional OT, AI, Governance and Security AdvisorCurrent
Large public railway transport operator, Belgium
2026.07 – present
Fractional role advising on operational technology, AI, governance and security for a large public transport operator in Belgium.
- Delivered
- Excellence delivered on a major SAP roll-out.
Board Advisor and Head of AI Governance, Security and Technology RiskCurrent
Fintech organisation, UK, UAE and Bermuda
2025.08 – 2026.11
- Responsible
- AI governance, control frameworks and Board and Audit Committee reporting.
- Accountable
- Enterprise security, technology risk and AI governance, reporting to the Supervisory Board and ExCo.
- Hands-on
- Defined AI principles, acceptable-use standards and risk classes; ran the SOC 2 Type II delivery.
- Delivered
- Clean SOC 2 Type II, security hardening and cloud migration, ready for a State-Investor sale.
Interim Head of IT Security and Technology Risk
LeasePlan / Ayvens (Société Générale), Amsterdam
2022.06 – 2025.05
- Responsible
- A global security and technology risk team; risk and control frameworks, including shadow AI.
- Accountable
- Day-1 security and technology integration of the merger, as 1st Line of Defence.
- Hands-on
- Led the Day-1 Zero Trust and infrastructure integration alongside SAP S/4HANA.
- Delivered
- Zero major findings against ECB, NIST CSF and ISO 27001, with a stable BAU handover.
Executive Security Advisor to the Group CIO
Large Oil, Gas and Energies Operator, London
2021.05 – 2022.06
- Responsible
- Counsel on technology, operational and emerging risk, including early AI use cases.
- Accountable
- Risk and programme status reporting to the Board and ExCo.
- Hands-on
- Built the information security framework for executive committees and incident response playbooks.
- Delivered
- Support for large SAP S/4HANA programmes, M&A due diligence and divestiture.
Head of Cyber Resiliency and Security
Large Oil, Gas and Energies Operator, London and The Hague
2019.10 – 2021.05
- Responsible
- The global Cyber Defense SOC and resiliency function; chair of the enterprise risk committee.
- Accountable
- Group Audit Committee actions and governance of large transformation programmes.
- Hands-on
- Invoked and ran BCP/DRP; delivered global secure access alongside ERP transformations.
- Delivered
- Enterprise-wide remote working from February 2020; CEO Award for Resiliency.
Earlier leadership in energy, aviation and banking
Shell Aircraft & Retail, ING Investment Management Bank NV, ABN AMRO Bank NV
2004 – 2019
- Responsible
- Digital transformation programmes, cyber and security management and IT audit.
- Accountable
- Divestment security due diligence, resiliency audits and operational integrity audits of an executive aircraft fleet.
- Hands-on
- Threat hunting, forensics and advanced threat protection; implemented DLP, SIEM and security automation.
- Delivered
- Governance operating model for Finance, Legal, HR and Corporate; SOX and internal control leadership.
Delivery across regions
Programmes and projects delivered across MENA, Asia-Pacific and the US mainland.
Drag to rotate
Delivered across
- MENA
- Asia-Pacific
- US mainland
Availability
- EU
- Asia
- GCC
Frameworks and regulation
Familiarity with, and advisory services on, regulatory and control frameworks, tuned to each market's regulators and AI guidance.
Global
- NIST AI RMF
- ISO/IEC 42001
- EU AI Act
- OWASP Top 10 for LLM Applications
- NIST CSF
- ISO 27001
- SOC 2
- GDPR
- NIS2
- DORA
- ECB
- SOX ITGC
- COBIT
- COSO
UAE
- UAE PDPL
Singapore
- IMDA Model AI Governance Framework
- IMDA Agentic AI Governance Framework
- AI Verify
- MAS TRM Guidelines
- MAS FEAT Principles
- PDPA
- Cybersecurity Act
Hong Kong and Macau
- PDPO
- PCPD AI Model Framework
- PCPD Agentic AI Guidance
- HKMA C-RAF
- Macau Cybersecurity Law
- Macau PDPA
Japan
- AI Promotion Act
- AI Guidelines for Business (METI and MIC)
- APPI
- FSA Cybersecurity Guidelines
Malaysia
- BNM RMiT
- PDPA
- Cyber Security Act 2024
Recognition
CEO Award for Resiliency (2020)
Major energy company, Group CEO
Group CFO Excellence Award (2021)
Major energy company, Group CFO
Group CDIO Excellence Award (2022)
Major energy company, Group CDIO
Day 1 recognition
Major leasing and mobility group
Best Performing Team Award
Fintech organisation, CFO
CISM and CRISC (ISACA). MSc and BSc Computer Science. PG Dip Crisis Management.
Beyond the Boardroom
Industry Engagement & Thought Leadership
GISEC Global, Dubai
Industry delegate (2024 and 2025) at the region's flagship cybersecurity event, engaging with CISOs, regulators and vendors on emerging GCC threat trends, cloud security and regulatory developments.
UAE Cyber Security Council
Working group and consultation participant, contributing to industry sessions that support national cyber resilience initiatives and public-private alignment with the UAE cybersecurity strategy.
ENISA
Contributed to an ENISA consultation and working group process, supporting EU-level dialogue on cybersecurity policy, regulation and resilience.
EIC 2025, Berlin
Attended the European Identity & Cloud Conference 2025, engaging with identity and cloud security leaders on Zero Trust, IAM and cloud-native security architecture shaping the European market.
Speaking and thought leadership
Open to keynote and panel engagements, in discussion with regional and EU organisers on upcoming speaking opportunities across cybersecurity forums.
At your venue
Available to travel on-site for new enterprise engagements, conference appearances, or board and government advisory sessions, wherever the conversation needs to happen.
Where can I be of assistance to your project, programme or company?
Choose one or more topics, add your own, and send it to me by email.
