The Customer is King!

Our CAG Members have unique work experiences in the audit and control space in all three roles as customer, vendor, and consultant. Our mission is to be an independent, trusted advisor to customers first and product vendors secondly. Our membership is comprised of only senior consultants, so we can provide our clients proven methodologies, quicker solution delivery, effective application security design, practical training, and in-depth product evaluations. 
With offices in the US, Canada, and Europe, Customer Advisory Group serves corporations at the Enterprise and / or Business Unit levels. We strive to create realistic, tangible, sustainable successes for every client.

James E. Roeske

Chief Executive Officer

James is a renowned GRC and Security speaker, practitioner, and advocate since 1995. James founded firms that became the de facto implementers of SAP GRC, post-acquisition of Virsa Systems by SAP. With 250+ customer implementations, James has developed unique insight on a wide range of customer GRC and Security journeys from assessment to adoption and implementation. James’ 27+ years as an Auditor, SAP Security Architect, and Compliance practitioner present invaluable insight to clients.​

Jamie Frame

Chief Operating Officer

Jamie is a dynamic global leader, with 25+ years of combined Corporate and Consulting experience in the field of Information Security, GRC, Risk Management and Audit, with a sophisticated understanding of Information Security Architecture and Infrastructure. Jamie possesses a deep knowledge of best business processes and practices, and excels at building Global Business relationships. Jamie has led over 30 large scale Security, global ERP business transformation projects for multiple F100 companies. He specializes in establishing and leading Information Security innovation and operations programs to enable successful product-strategy innovation, development, deployment, and compliance sustainability.

Ruth Johnson

Ruth has 20+ years of experience specializing in SAP security application design, security implementation, and Segregation of Duties design and security audit; over 9 of which has been focused on SAP GRC application implementations. Ruth’s recent experiences in a client’s upgrade to GRC Access Control 12.0 keeps her up to the latest release from SAP. Ruth is a hands-on functional SAP security specialist, ensuring the design and development of appropriate security and controls in both public and private sector companies around the world. She has worked on global scale SAP GRC implementations and has extensive experience in planning, implementing, training and administering SAP GRC applications. Ruth is a speaker at SAP GRC conferences as one of the foremost experts on workflow in SAP GRC Access Control. As most of our members, Ruth has great insight because she has the dual perspectives: One as a performer inside a company and the other as an external advisor to many customers.

Dina Shahin

Dina has 25+ years of experience specializing in SAP security application design, security implementation, Segregation of Duties design, SAP GRC , SAP IAG application implementation and audit. She has worked on global scale SAP implementations and has extensive experience in planning, implementing, training, and administering SAP GRC applications as well as Security Implementations. Dina is a hands-on functional SAP security specialist, ensuring the design and development of appropriate security and controls in both public and private sector companies around the world. Dina has over 150 engagements at customers in a wide-range of organization sizes and industries. She is based in Germany.

Gabriel Perez

Gabe has 20+ years of SAP Security experience with his focus on performing SAP GRC Access and Process Control implementations. Gabe has performed several SAP Ramp up Process Control implementations as well as SAP Security design implementations. Prior to joining Customer Advisory Group, Gabe was performing SAP GRC implementations for multiple customers, as well as Security access remediation and mitigation. He also served 8 years in the Army Reserves.