Skip to main content
Liorry Herisnor
Status: ShippedEnterprise Experience2011 — 2015

Enterprise Technology Programs in Financial Services

Four consulting engagements inside large financial institutions — requirements, structured testing, defect management and release readiness across Loan IQ, a $45m program and advisor analytics.

At a glance

Four separate engagements — Credit Suisse, Moody's, Morgan Stanley and Société Générale — in organizations where a change reaches production only after requirements are agreed, testing is coordinated, defects are resolved and retested, and a business owner confirms the outcome. Four different programs with four different sponsors, and one delivery pattern that the rest of this portfolio is built on.

  • $45m budget

    Program scale

    Supported discovery and planning for a technology program with an approximately $45 million budget — problem definition, current and future state, business case, requirements, roadmaps, risks and vendor evaluation.

    Source: Resume — Moody's Investor Services engagement, July 2014 to April 2015.

  • 17,000+ advisors

    Analytics reach

    Supported an analytics and content-distribution platform serving more than 17,000 financial advisors, including a Tableau dashboard delivered for regional sales directors.

    Source: Resume — Morgan Stanley engagement, February 2013 to July 2014.

  • SIT and UAT coordinated

    Testing ownership

    Created test cases, coordinated system integration and user acceptance testing, managed defects through resolution and retesting, and validated business outcomes before delivery.

    Source: Resume — Credit Suisse and Morgan Stanley engagements.

Status
Status: Shipped
Category
Enterprise Experience
Dates
2011 — 2015
My role
Business analyst and delivery consultant
Target users
Operations teams running loan servicing, settlement and trade support, Sales and business stakeholders consuming analytics, Technology teams delivering against documented requirements, Steering committees deciding program direction
Technology
Loan IQ, SQL, SAS, Tableau, HP ALM / Quality Center, SWIFT, OPICS, Visio

What I owned

  • Discovery
  • Requirements
  • Testing
  • Acceptance
  • Delivery coordination

Areas this project actually involved. Anything not listed, I did not own.

Who and what supported delivery

Business users
Operations staff running loan servicing, settlement, trade support and sales desks — the people whose process was being changed and who signed off the outcome.
Technology teams
In-house development and QA teams who built and fixed against the requirements and defects I documented.
Offshore team
A small offshore team I led on the Tableau dashboard delivery at Morgan Stanley.
Vendors
IT vendors submitting proposals into the Moody's program, evaluated through a scorecard applied across every submission.

Consultant engagements. I did not own the systems — I owned the requirements, the testing coordination, the defect position and the evidence that the business outcome had actually occurred.

Related artifacts

Executive summary

Four consultant engagements between 2011 and 2015, inside four financial institutions. They were separate programs with separate sponsors and no relationship to one another, and this page keeps them separate.

They are grouped here because they taught the same thing. In a regulated environment, nothing reaches production because someone is confident. It reaches production because the requirement was written down, the tests were planned and run, the defects were resolved and retested, a business owner confirmed the outcome, and the release was controlled. That sequence is slow in the places where being fast is dangerous.

That is the discipline the AI and automation work in this portfolio is built on. When the sending platform refuses to start a campaign because a readiness check has not completed, or when the agent governance layer denies an action because it cannot reach the capability registry, that is the same idea implemented in code: the control is structural, not a matter of anyone remembering it.

Credit Suisse — Loan IQ and back-office technology delivery

Business Analyst, Consultant — Loan IQ, Back-Office Technology Delivery and Reference Data · New York, NY · January 2011 — July 2012

Business context

Loan servicing and back-office processing are unforgiving. The processing has to be accurate, the data behind it has to be right, the controls have to hold, and operations and technology have to agree on what a change is supposed to do before it is made. A system improvement that is technically correct and operationally wrong is still a failure — and it surfaces in a place where money moves.

What I did

I supported Loan IQ and related back-office functions across the loan-servicing lifecycle, on initiatives to improve servicing processes, strengthen operational controls and deliver system enhancements.

  • Requirements and process mapping. Gathered requirements from operations and technology stakeholders, mapped the business processes and the data flows between systems, and documented new and updated processes with the process owners who had to live with them.
  • Testing coordination. Created test cases from the documented requirements, coordinated system integration testing, and executed or coordinated the testing itself.
  • Defect management. Managed defects through to resolution with the technology teams, then coordinated retesting against project deadlines rather than treating a delivered fix as a closed defect.
  • User acceptance testing. Coordinated UAT with the operations staff who ran the process, so acceptance came from the people the change affected.
  • Business validation. Confirmed the intended operational outcome actually occurred — not only that the software behaved as specified. Those are different tests and only one of them is the point.
  • Reference data and settlement. Supported reference-data and settlement-related systems, including a migration of settlement instruction and holdings data from a third-party source into a new internal static-data system, and acted as subject-matter expert on those reference-data processes.
  • Controls. Participated in quarterly audits verifying security description breaks, and monthly statement reviews.

Why this engagement matters to a product role

It is where I learned that the artifact is the deliverable. A requirement nobody wrote down is a conversation. A test case traced to a process step is evidence. A defect closed without a retest is a defect. Product and program work in any industry runs on exactly those distinctions.

The testing and delivery lifecycle

The sequence below is the one I ran on the Credit Suisse delivery and, with different names, on the Morgan Stanley quarterly enhancement cycles. Every step has an entry condition; the value is in refusing to skip one.

Requirements to release readiness

Human-run process work, deliberately. Every box is a person or a group of people agreeing something — which is why the artifacts matter: they are the only durable record that the agreement happened.

  1. Human action

    Requirements

    Elicited from operations and technology stakeholders, mapped against the process and the data flows, and signed off.

  2. Human action

    Test planning

    Test cases written from the requirements, each traced back to the process step it covers, so coverage is arguable rather than asserted.

  3. Human action

    System integration testing

    End-to-end flows across the servicing lifecycle, including the upstream and downstream systems.

    Decision point: Entry condition: build deployed to the integration environment and interfaces available.

  4. Human action

    Defect resolution

    Logged with reproduction steps and severity, triaged with technology, fixed, and the change confirmed.

  5. Human action

    Retesting

    The failed case re-executed, plus the cases around it that the fix could plausibly affect.

    Decision point: A delivered fix is not a closed defect. Closure requires a passing retest.

  6. Human action

    User acceptance testing

    Operations staff running their own real process on the candidate build, with test data prepared for it.

  7. Approval gate

    Business validation

    The process owner confirms the intended operational outcome occurs — not only that the system behaves as specified.

    Decision point: This is the gate that catches a change which passed every test and still does the wrong thing.

  8. Approval gate

    Release readiness

    Defect position reviewed against the severity policy, scope confirmed, and the reverse path identified before the change goes out.

  • Human action
  • Approval gate

The two artifacts behind this flow — the UAT plan and the defect status report — are published on the artifacts page as representative reconstructions: the structure and the rules, without the employer's data.

Moody's — discovery on a $45 million technology program

Business Analyst, Moody's Information Technology (Consultant) · New York, NY · July 2014 — April 2015

Discovery phase of a large IT initiative with an approximately $45 million program budget, against an unusual niche business model — which mattered, because none of the standard patterns fit it cleanly.

  • Problem definition. Captured the business problem statement, the current state, the desired future state and the business case, identifying the business needs and the user groups each change would affect.
  • Requirements and design support. Contributed to high-level technical design: business requirements, future-state solution architecture diagrams, and documentation of stakeholder workshops and interviews.
  • Use cases and user stories. Developed both, to communicate requirements to senior managers and technology teams in the form each audience could act on.
  • Roadmaps and sequencing. Coordinated high-level and detailed roadmaps with IT vendors and internal divisions, identifying program risks and recommending responses that kept projects in scope.
  • Vendor evaluation. Built a scorecard applied across all proposals to support procurement, and recommended vendors that fit the program's constraints.
  • Cost estimation. Estimated cost and sequencing using parametric estimation (QSM SLIM), t-shirt sizing and bottom-up estimation, against defined IT delivery performance targets.
  • Steering committee reporting. Prepared material for senior management and the bi-weekly steering committee, covering alignment with the firm's target operating model, status and risks.

This is the closest thing in my background to a technical program management role at scale: multiple vendors, multiple internal divisions, a dependency graph nobody held in their head, and a committee that needed a decision rather than a status report.

Morgan Stanley — analytics delivery for 17,000+ advisors

Business Analyst, Insights & Analytics, Wealth Management (Consultant) · New York, NY · February 2013 — July 2014

Worked with the Sales Desk on an analytics and content-distribution capability that delivered firm strategy, market color and tactical trade ideas to more than 17,000 financial advisors.

  • Targeting requirements. Elicited requirements from the Sales Desk and worked with big-data developers to build queries against the enterprise database, surfacing investment ideas matched to each advisor's book of business.
  • Dashboard delivery. Led a small offshore team building a Tableau dashboard for regional sales directors — business analysis, requirements, delivery coordination and UAT — then owned weekly reporting and analytical consulting for its users after rollout.
  • Analysis. Extracted and analyzed data using SAS and SQL, worked large data sets in Excel, and presented findings to senior executives.
  • Testing. Managed end-to-end testing for internal applications across quarterly enhancements: test plans, test cases and test scripts.
  • KPI reporting. Tracked and reported operational KPIs, then set targets with management.
  • Documentation. Maintained training and business-process design documentation for stakeholders.

The part that transfers most directly to product work is owning the thing after launch. Delivering the dashboard was the smaller half; the larger half was the weekly reporting and the consulting conversations that told me whether the dashboard was answering the question the sales directors actually had.

Société Générale — high-volume financial operations

FX Exotic Trade Support (Consultant) · Jersey City, NJ · August 2012 — December 2012

Supported an FX desk trading illiquid currencies that lack market depth and trade at low volume — where an error is not absorbed by the market, it just stays wrong.

  • Contributed to daily processing across confirmations, payments and investigations, and compiled daily reporting on positions, problem trades, currency valuation and pending deals.
  • Identified and corrected trades booked to the wrong counterparty, non-deliverable settlement discrepancies and un-booked trades ahead of valuation, and worked with the investigations team to resolve breaks and risk items within deadline.

Short engagement, narrow scope, and the origin of an instinct that shows up throughout this portfolio: reconciliation is not administration. If two systems can disagree about what happened, one of them is going to be believed, and it will be the wrong one.

Product and program capabilities demonstrated

CapabilityWhere
Requirements analysis and elicitationAll four engagements
Business process and data-flow mappingCredit Suisse, Moody's
Use cases and user storiesMoody's
Test-case designCredit Suisse, Morgan Stanley
System integration testingCredit Suisse, Morgan Stanley
User acceptance testingCredit Suisse, Morgan Stanley
Defect management and retestingCredit Suisse
Business-outcome validationCredit Suisse
Release readinessCredit Suisse, Morgan Stanley
Roadmaps, sequencing and dependenciesMoody's
Program risk identification and responseMoody's
Vendor evaluation and procurement supportMoody's
Cost estimationMoody's
Steering committee and executive reportingMoody's, Morgan Stanley
Analytics delivery and KPI reportingMorgan Stanley
Offshore delivery coordinationMorgan Stanley
Operational improvementCredit Suisse, Société Générale

The common delivery pattern

Different sponsors, different systems, one sequence:

  1. Understand the process as it actually runs, not as the documentation describes it.
  2. Align the stakeholders who disagree, before writing anything down.
  3. Document the requirements precisely enough that an engineer and a tester read the same thing.
  4. Coordinate delivery across the teams and vendors who own the parts.
  5. Test thoroughly — planned, traced to the process, and executed rather than asserted.
  6. Resolve defects and retest them; a delivered fix is not a closed defect.
  7. Validate the business outcome, which is a different question from whether the software works.
  8. Support a controlled release, with the reverse path identified first.

Where this shows up in the current work

The mechanism changed; the sequence did not.

  • The requirement written before implementation became the recovery contract written as a testable statement before any code existed.
  • Business validation became the readiness gate that refuses to start a send when a precondition has not completed — and fails closed rather than warning.
  • Defect closure requiring a retest became a crash-recovery test that asserts timer state rather than counts, because the count-based version passed while the behavior was wrong.
  • Release readiness became feature flags that default to off, so deploying and changing behavior are separate events with separate reverse paths.
  • Steering committee reporting became the invariant record: the written rule with a pointer to the evidence that proves it still holds.

Evidence and its limits

There are no screenshots, documents or metrics from these engagements on this site, and there will not be. They were client production environments and client programs.

What can be verified is on the resume, and the artifacts page carries representative reconstructions of the UAT plan, the defect status report, the stakeholder map, the steering committee update and the vendor scorecard — clearly labeled as reconstructions of the artifact's structure, not as copies of employer documents.

I am happy to talk through any of this in detail in a conversation, including the parts that went badly.

Want the detail behind this?

I am happy to walk through the architecture, the decisions and what I would change.