The Leadership Role That Shaped My Life
Twenty-nine years ago today, I sat for my Eagle Scout Board of Review. I remember less about the room and more about what it represented. I do not recall the room layout, the…
Speaking
Technology risk, made clear enough to act on.
I speak with executives, risk leaders and technology teams about getting more from technology while keeping its risks in check. Expect a clear point of view, practical next steps, and probably a trail story.
Speaker bio
About Tim
Tim Maloney is a Director at Protiviti, where he leads the U.S. Technology Risk, Governance and Enablement practice. He helps organizations remove the friction from technology risk so they can move faster. He has done this work since 2002 across a wide range of industries. His focus is IT governance, risk and compliance, along with the everyday processes that keep a strategy from falling apart. He has run IT and cybersecurity compliance programs for global companies, built risk frameworks from scratch, and turned governance reviews into roadmaps that leadership teams follow. Tim believes good governance should make the right path the easy path. His talks and writing borrow a lot from the hiking trail: maps over checklists, switchbacks over shortcuts, and packing only what the trip requires. Away from work, Tim is an Eagle Scout, Scoutmaster of Troop 457 in Zelienople, PA, and a merit badge counselor. He writes about technology risk and leadership on his Trail Map at tim-maloney.com.
A Bio for Your Program
-
One-liner
Tim Maloney helps organizations remove the friction from technology risk so they can move faster.
-
Program line
Tim Maloney is a Director at Protiviti, where he leads a national team that helps organizations remove the friction from technology risk so they can move faster.
-
Short bio
Tim Maloney is a Director at Protiviti, where he leads the US Technology Risk, Governance and Enablement practice. For more than 20 years, he has helped organizations build technology risk, governance, policy and compliance programs that people actually use. His view is simple: good governance should make the right path the easy path. Outside of work, Tim is an Eagle Scout and Scoutmaster of Troop 457 in Zelienople, PA, and spends as much time on the trail as he can.
-
Full bio
Tim Maloney is a Director at Protiviti, where he leads the U.S. Technology Risk, Governance and Enablement practice. He helps organizations remove the friction from technology risk so they can move faster. He has done this work since 2002 across a wide range of industries. His focus is IT governance, risk and compliance, along with the everyday processes that keep a strategy from falling apart. He has run IT and cybersecurity compliance programs for global companies, built risk frameworks from scratch, and turned governance reviews into roadmaps that leadership teams follow. Tim believes good governance should make the right path the easy path. His talks and writing borrow a lot from the hiking trail: maps over checklists, switchbacks over shortcuts, and packing only what the trip requires. Away from work, Tim is an Eagle Scout, Scoutmaster of Troop 457 in Zelienople, PA, and a merit badge counselor. He writes about technology risk and leadership on his Trail Map at tim-maloney.com.
Approach
How I approach a session
I don't sell from the stage. You won't see a product demo or a pitch for a service. People come to a conference to think, so that's what we'll do.
I bring what I'm seeing across the industry: the lessons learned, the practices that are working, and the ones that aren't. Then I want to hear what you're seeing. The best sessions feel more like a conversation than a lecture, so I don't stay behind the podium. I'll be out in the room asking questions, and I fully expect a few people to push back.
Every session is built for the room it's in. I don't recycle a webinar your attendees may have already sat through. If there's related work worth their time, I'll point them to it.
I want everyone to walk out with one thing they'll change at work on Monday.
Signature topics
What I speak on
-
Reading the Trail Map: technology risk with clarity
Most technology risk programs have plenty of maps and very little sense of where they're headed. This keynote walks the route from trailhead to summit to show how governance, risk and enablement pull together, and how a leader picks a path the team will actually follow. People leave with a plain way to explain risk decisions to colleagues who don't live in them.
-
Governance that speeds you up
Governance gets blamed for slowing the business down, and sometimes it earns that. This talk is about structure: who holds which decision, how the Three Lines fit together, and how controls are designed so they create flow instead of friction. When the guardrails are clear, teams move faster.
-
Taking the friction out of enterprise technology risk
Ask a business owner about technology risk and you'll often hear about the same questionnaire arriving from three different teams. This session looks at how the work runs day to day: assessments, hand-offs, tooling and duplicated asks. Then it gets practical about cutting the effort, and the controls that have become dead weight, without cutting the protection.
-
Bridging business risk and technology risk
Business leaders talk about revenue, customers and reputation. Technology teams talk about vulnerabilities, outages and control gaps. Both are describing the same exposure in different languages. This talk shows how to connect the two, so technology risk shows up where business decisions get made and lands with the people who own the outcome.
Talks
Where I've spoken
Recent thinking
From the Trail Map
What I've been writing about. Most talks start here.
Stop Handing Auditors and Examiners Puzzle Pieces
Most audit and regulatory friction isn’t caused solely by missing controls. It happens when risk, control design, testing, and regulatory expectations are not explained as a…
Metrics for Compliance Program "Awakening"
Most compliance programs are built to pass assessments, not to manage risk over time. Assessment metrics are necessary, but they only tell you whether controls were present, not…
Speaker kit
Everything you need to promote a talk
One download with both high-resolution headshots and the Speaker Bios and Profile PDF, which carries all four bios and both introduction scripts, ready to copy. Use any of it to promote an event I'm part of.
Invite Tim
Ask me to speak
Tell me about your event and your audience. It comes straight to my inbox, and I'll get back to you about fit and availability.
Inquiry sent
Thanks. Your event details landed in my inbox and I'll be in touch soon.