Retained architecture mandates for regulated banking transformation. Most recent anchor: rationalisation of an 848-component portfolio at Société Générale group (BRD) reaching 10M+ customers, with 39% year-one savings sustained over three years.
Architecture of record on core banking, payments and SWIFT estates; control alignment to PCI DSS, ICFR/COSO, ISO 27001 and SOC 2; recovery of programmes that need to pass supervisory scrutiny. Engagement window typically 6–24 months against a CIO, CTO, CDO or programme sponsor.
Société Générale group (BRD) — 848 components governed, 10M+ banking customers, 39% year-one savings sustained 3 years. Plus 23-bank portfolio (PIR2-IT 2024–Present) covering UNFCU, EIB, HSBC, BNP Paribas, Credit Suisse and others.
Four offers recur in regulated financial services. Each is scoped, time-boxed and ends in artefacts the institution owns.
Methods are scoped, not decorative. Each mandate runs against a defined framework stack so decisions remain defensible to internal audit, external supervisors and donors.
Target-state architecture for the systems that carry accounts, payments, products and financial processing. Continuity first, change second.
Enterprise architecture linking business capabilities, platform estates and delivery roadmaps into one defensible transformation backbone.
Controls strong technically and defensible to internal audit, supervisors and rating agencies.
Digital channels, specialist applications and market-facing components kept integrated, observable and inside the control envelope.
Each mandate produces a defined artefact set the institution owns at handover.
Banking transformation passes scrutiny when platform modernisation, regulatory control and continuity are treated as one design problem — and when the architect of record owns the evidence trail end to end.
Engagements filtered by primary domain from the full 270+ project record. Full detail and NDA-gated evidence packs available on request.
Large-scale banking transformation and cybersecurity programmes — core-banking migrations, data-centre consolidation, cybersecurity modernisation. Named clients: UNFCU, EIB, Société Générale, HSBC, BNP Paribas, Credit Suisse.
23-bank portfolio
Global cybersecurity and digital-banking transformation programme for 250,000+ UNFCU members across 120+ countries. Portfolio of 300+ projects spanning cloud adoption, core-banking migration & modernisation and cybersecurity compliance.
Key activities
Frameworks: ISO 27001 · PCI DSS Level 1 · NIST 800-53 · ISO 22301 · COBIT 5 · GDPR · SOC 2 · Zero Trust (NIST 800-207)
300+ projects · 250K+ members · 120+ countries
Lead Solution Design team for modern cloud / digital and cryptocurrency architecture. Identify and document business flows, data exchanges, identity authorisation and security level. Integrations with European and governmental agencies. Updated Business Continuity Plan. Support ECB negotiations with EU, NATO, INTERPOL.
—
PMO effective operation, IT Strategic Planning and Banking Transformation Programme. Set-up Center for Secure Information Systems. Enterprise Architecture Strategy & Roadmap. Coordination with PMOs/CSICs in Croatia, France, Russia, Bulgaria, Moldova. New Core Banking — INFOSYS Finacle / Oracle Flexcube. Cards & alternative channels (Mobile/Internet Banking, WU@ATM, WU@POS, prepaid). 900+ servers, 550+ applications, 120+ audit recommendations closed (89%).
US$3.93M IT savings · US$2.88M vendor negotiations · US$63M budget · OPEX -44.2%
IT system for electronic payment (T24, Murex, TI+) and inter-banking compensation. Process design and compliance with international mechanisms. Data protection. PCI-DSS & ISO 27001 certification. 30T transactions/day. 99.9998% availability.
—
IT Risk Analysis System (ISO 2700x). Solution design of new Core Banking. Cloud private/public PoC. Data centre relocation, HW/SW/MW/NW/SAN consolidation. Set-up Business Intelligence Competence Center (Data Architecture, Quality, Governance, BI & Executive Dashboard).
—
Upgraded Risk Analysis System (Murex), Card System (Murex), RISC and x86 server infrastructure. Center for Secure Information Systems: SIEM, DB Security, ISMS & ISR, MDM, Managed Security Services. Process improvement (ITIL).
—
Alcatel-era engagement with Groupe Société Générale: secure banking network integration, OSS/BSS modernisation and core-banking telecom infrastructure (predecessor to the later VAUBAN programme delivered as freelance 2011 – 2013).
Frameworks: ITIL v3 · COBIT · ISO 27001 · PCI DSS
—
Alcatel-era BCR Bank engagement: core-banking telecom and network integration, secure-network projects across the European banking estate.
Frameworks: ITIL · ISO 27001 · PCI DSS · TOGAF
—
Alcatel-era engagement with BNR (National Bank of Romania): telecom and secure-network integration for central-bank operations.
Frameworks: ITIL · ISO 27001 · TOGAF · Central-bank operational standards
—
Alcatel-era CEC Bank engagement: telecom and secure-network integration for the Romanian state savings bank estate.
Frameworks: ITIL · ISO 27001 · TOGAF · PCI DSS
—
Biometric security systems and Building Automation System for Citibank.
—
Security systems and Building Automation System for BRD Bank and BCR Bank.
—
