Today at Wavestone, I work on AI tool security, vulnerability management, security architecture, and identity programs. Before that, at Deloitte, I managed 150 professionals across 14+ workstreams in a global cyber transformation for an S&P 500 company.
Cybersecurity transformation from strategy to delivery. I keep complex programs moving and keep leaders focused on what matters most.
Wavestone
Nov 2025 to Present
Consultant, New York
Lead cybersecurity work from strategy to delivery, including roadmaps, maturity reviews, and operating model design.
Manage engagements day to day, write executive updates, and help scope new work.
Mentor teammates and co-create thought leadership with colleagues in the US, UK, and France.
01
Global Diagnostics Company
AI and Product Security
Security review of generative AI coding tools for R&D use, covering data handling, privacy terms, and vendor risk.
Product security risk assessments for diagnostic software, consolidated for a regulatory submission.
Supplier security assessments and scoping for an ISO 27001 mock audit.
02
Biotech Holding Company
Vulnerability Management
Standing up a vulnerability management program, starting with an MVP across endpoints, lab IT, cloud, and network.
Built the PMO tracker, execution plan, and leadership business case, and structured the delivery backlog.
Prepare the weekly status reporting for the client’s security and IT leaders.
03
U.S. Healthcare Company
Security Architecture
Security architecture reviews of third-party software before it is approved for use.
Vendor security questionnaires, risk findings, and approval recommendations for business owners.
04
Global Environmental Services Company
Identity and Access
Active Directory consolidation across 47+ sites into a single domain.
Migration wave planning, tracking, and data audits of migration results.
Deloitte
Mar 2021 to Aug 2025
Project Manager, Risk and Financial Advisory, New York
Four engagements across cyber transformation, integrity and compliance, IT audit, and firmwide cyber upskilling.
05
Global Quick Service Restaurant Company · S&P 500
Cybersecurity Transformation
Led multiple workstreams within a global cyber transformation program focused on modernizing infrastructure and improving security operations.
Managed 150 professionals and the timelines, scope, dependencies, and coordination across 14+ workstreams, reporting progress and blockers to leadership.
Facilitated stakeholder alignment, risk tracking, and issue resolution across technical and business teams.
Supported improvements to vulnerability management, operational security practices, and executive reporting.
06
Global Technology Company
Integrity and Compliance
Served as project manager on high-impact risk and integrity initiatives, including platform safety and misinformation tracking.
Oversaw compliance-driven deliverables while coordinating with legal, trust, data, and business teams.
Managed project plans and executive updates aligned with global integrity goals.
Worked with teams to improve reporting workflows and visibility into risk mitigation progress.
07
E-Commerce Company
IT Audit and Risk Assessment
Supported IT audit and risk review work tied to financial statement audits.
Identified control gaps and provided practical recommendations to improve audit readiness and risk posture.
Worked with internal and external auditors to validate findings and prepare audit documentation.
Supported walkthroughs, control testing, and documentation review tied to audit requirements.
08
Internal Deloitte Engagement
Strategic Growth Offering
Managed planning and delivery for a firmwide cyber upskilling effort focused on 80+ role-based digital badges.
Defined requirements and aligned learning pathways with leadership priorities and delivery timelines.
Coordinated cross-functional teams to track progress, manage risks, and communicate milestones to stakeholders.
Supported content development and platform testing for the rollout of learning modules.
What I Work On
Security
Vulnerability Management
Security Architecture
Identity and Access
Active Directory Migration
Product Security
Third-Party Risk
Cloud and Zero Trust
IT and OT Security
Data Protection
Incident Response
Audit Readiness
Maturity Reviews
AI
AI Security Reviews
AI Vendor Risk
AI Governance
AI-Assisted Delivery
Program Delivery
Program Management
PMO Setup
Roadmaps
Executive Reporting
Risk and Issue Management
Stakeholder Alignment
Agile and Waterfall Delivery
Budget Tracking
Business Cases
Workshops
Proposals and SOWs
Education
Curriculum Design
Degree Development
Case-Based Teaching
Student Mentoring
Open Educational Resources
Academic Partnerships
Supplemental Instruction
Cyber Upskilling
How I Run Programs
Scope and timeline planning, budget tracking, agile and waterfall delivery, risk and issue logs, stakeholder mapping, workshops, and executive reporting.
Tools
AI
Claude (Anthropic), Gemini (Google), ChatGPT (OpenAI)
Delivery
Jira, Smartsheet, Microsoft Project, Teams
Analysis
Excel, Tableau, PowerPoint
Cloud
AWS
AI Security and Governance
SecuringAI
AI tools are arriving faster than security teams can review them. I help answer the first question every team asks: is it safe to use, and under what conditions?
HumanMachine
Drag across the portrait to switch between human and machine.
How I Review an AI Tool
01
Data
Where prompts, code, and outputs go, how long they are kept, and whether they train the model.
02
Access
Single sign-on, roles, admin controls, and audit logs.
03
Vendor
Security and privacy terms, certifications, and where the data lives.
04
Use
Approved use cases, guardrails, and the policy teams actually follow.
Outcome Approve, approve with conditions, or decline.
Talk to My Digital Twin
A small command line about me. Type a command, or tap one below. Start with help.
arvis@twin: ~
arvis@twin:~$ whoami
Arvis Sinani
Cybersecurity Consultant, Wavestone
Assistant Professor, BMCC, CUNY
New York City · Albanian-American · Ed.D. · CISM · PMP
BMCC · CUNY
Teaching
I teach business at Borough of Manhattan Community College (BMCC), part of the City University of New York, and I’m building a new A.S. in Cybersecurity Management.
BMCC
Jan 2023 to Present
Assistant Professor, Department of Business Management
BUS 104Introduction to Business
BUS 200Business Organization and Management
MAR 100Introduction to Marketing
Teach through consulting-style cases and semester projects where student teams set scope, timelines, risks, and deliverables.
Coach teams to produce client-ready slide decks, executive summaries, and recommendations.
Advise students on careers in consulting, cybersecurity, and project management.
What I Build and Lead at BMCC
01
A New Degree
An A.S. in Cybersecurity Management: 60 credits in the Business Management Department, now moving through CUNY approval.
02
BMCC to Baruch Pathway
An articulation agreement with Baruch’s Zicklin School of Business, effective Fall 2026.
03
$3,000 OER Grant
Zero-cost course materials for cybersecurity management, built with the BMCC Library.
04
Supplemental Instruction Coordinator
I coordinate, guide, and support the Supplemental Instruction (SI) Leaders assigned to the Business Management Department.
Program Assistant
Sep 2017 to Mar 2021
Borough of Manhattan Community College, CUNY
Project Impact
Created, built, and updated the Project Impact website and social media pages.
Helped students set goals and connect with academic and campus resources, and led workshops on stress management and student success skills.
Urban Male Leadership Academy
Managed events, trips, and workshops, and mentored students on academic and campus resources.
Supported recruitment, web and video content, and student engagement, and represented UMLA at CUNY events, including CUNY Black Male Initiative activities.
2017 to Today
CareerMap
Education, consulting, and teaching from 2017 to today. Select a station for details.
EEducation
CConsulting
TTeaching
Station
Today
Career route map, 2017 to today. Education line: Associate in Science in Computer Science, BMCC, 2019. Bachelor of Business Administration in Computer Information Systems, Baruch College, 2021. Master of Science in Computer Information Systems, Baruch College, 2022. Doctor of Education in Organizational Leadership, Liberty University, 2025. Consulting line: Deloitte, March 2021 to August 2025. Wavestone, November 2025 to present. Teaching line: BMCC Program Assistant, September 2017 to March 2021. Assistant Professor at BMCC since January 2023. A new A.S. in Cybersecurity Management with a Baruch transfer pathway, Fall 2026.
Degrees and Certifications
Credentials
Four degrees, three of them from CUNY, plus CISM and PMP, four boot camps, and academic honors.
Degrees
2019
Associate in Science
A.S., Computer Science
Borough of Manhattan Community College, CUNY
2021
Bachelor of Business Administration
B.B.A., Computer Information Systems
Baruch College, CUNY. Zicklin School of Business
2022
Master of Science
M.S., Computer Information Systems
Baruch College, CUNY. Zicklin School of Business
2025
Doctor of Education
Ed.D., Organizational Leadership
Liberty University
Certifications, Training and Honors
CISM
Certified Information Security Manager
Security governance, risk management, program development, and incident management.
ISACA
Next: CISA and AAISM
PMP
Project Management Professional
People, process, and business environment, across predictive, agile, and hybrid delivery.
PMI
04
Boot Camps
Advisory Consultant School Deloitte
IT Audit Boot Camp Deloitte
Cyber and Strategic Risk Strategy Boot Camp Deloitte
