SUMMARY

• An executive with the ability to act as a liaison, single point of contact and decision maker for external clients, vendors, internal partners, stakeholders, business partners, offshore resourcing partners, technical/operations teams, legal governmental/regulatory and auditors.
• Certified Blockchain Implementor, Smart Contact requirements vetting and DLT security architecture.
• Currently guiding clients through Info Sec policy, risk assessments, design of security enterprise security architecture and policies for on - prem to cloud hybrid landscapes.
• Routinely manage the scope of Pen Testing engagements from SOW to Findings remediation and retesting.
• Managed budgets of more than 600 million dollars for US domestic and global organizations. Skilled at forecasting, estimates for portfolio/program level budgets, as well as auditing and control practices.
• Comfortable with all phases of vendor management, RFI/RFP, negotiating cost reductions with vendors and implementing streamlined process/infrastructure solutions to decrease overall portfolio costs. Develop, manage and communicate KPI’s at enterprise, portfolio and program levels.
• Well versed in Cloud and computing/storage, file sharing, cloud collaboration, access controls and cloud security, virtualization. IT Transformation, SaaS, PaaS, mobile device integration. Security as a service.
• Proficient at Agile and PMI (waterfall) and hydride PMO processes. An Agile Coach for existing and new Agile implementations.
• Extensive experience, in the financial, insurance, CCAR, GDPR, NYS DFS 500, HIPPA regulatory, credit (ACH), AML, e-commerce, B2B, KYC, publishing, content management, legal, health care and engineering industries.
• Conduct global network/infrastructure readiness and security assessments for clients prior to the build out of client portals, data solutions, VoIP.
• Excellent communication, training/mentoring and presentation skills, with cross industry experience utilizing the PMI, Scrum and Agile project management frameworks to assure a standardized project life cycle, with quantitative and qualitative execution of requirements vetting, risk, scope, time, cost and process management, as well as reporting and adherence to domestic and international regulatory statutes.
• Experienced and comfortable working with globally team throughout Africa, Europe, India, South America and the Caribbean. Willing to travel and relocate internationally.

TECHNICAL SKILLS

EVELOPMENT: MS Azure, AWS, AWS Docker, Dell Boomi, Hyperledger, Ethereum, Hybris, Apache, Tridion, .NET platform, Java, JavaScript, J++, C, C++, HTML, JSP, JDBC, Java, Hyperledger, SaaS, SSRS/Crystal Reports, SQL server, AS400

PRODUCTIVITY: MS Office 2010/2013/2016 , MS Office 365, SharePoint, SalesForce, MS Project 2010/2013/2016 , Rally, IRA, Clarity, HP PPM, Agile/SCRUM/KANBAN, Crystal Reports, Cognos, Adobe Acrobat, Photo Shop

QA/TESTING, REQUIREMENTS/RELEASE MANAGEMENT: HP Quality Center, HP ALM, JIRA, VSTS, Team Site Content Manager Rational Clear Case, Rational Developer, Rational Requisite Pro, Rational Clear Quest RUP, UM, Remedy, LoadRunner. WinRunner

SECURITY/INFRASTRUCTURE: Palo Alto, Fortinet, Blade Logic, Aperture, CrossBridge, F5, VMWare, VDI, Tibco

VOIP/TELEPHONY: NetCall, SIP, DID, POTS, Gateways, PBX

PROFESSIONAL EXPERIENCE

Confidential, NEW YORK

Global Portfolio Manager

Responsibilities:

• Integration, analysis and definition of high level security policies and processes, based on NYS DFS 500, GDPR, current SwissRe security policies, platform and industry standards.
• In a one-month period accelerated the SwissRe legal/vendor vetting and contract review processes to engage Protiviti, Palo Alto, Okta, COALFIRE, PCM, Cognizant, Microsoft and several high-level consulting SME’s for the alignment of on-prem data stores, MS Azure, Dell Boomi, Palo Alto firewalls, Okta access management and third-party partner/distributor testing or the initial product offering. As well as the ongoing development, testing and final release to production.
• Oversaw the integration of Okta identity management solution with Dell Boomi, Palo Alto and MS Azure.
• Conducted 3 simultaneous RFP/POC, technical evaluation and final selection processes for NYS DFS 500 readiness and corrective process/planning definition, firewall selection and implementation, identity/access management solutions and policy definition.
• Drove the Firewall POC, selection process, implementation plan and the onboarding to Palo Alto resources at the Armonk location to ensure that all security requirement could be documented, addressed and implemented across the technology landscape within a 60-day period. Working closely with SwissRe Info Sec representatives.
• Managed the Pen Testing process from the selection process, SOW definition, granting/revoking of access credentials and the post testing findings reviews as well as the remediation and retesting/confirmation tasks.
• Defined, authored and submitted to local iptiQ and global SwissRe management the iptiQ Access Management Policy. Utilizing a RBAC/Contextual based model for the UAPI and SAGE data store solutions.
• Owned the Microsoft relationship, budget and consulting relationship, meeting at least weekly with the Microsoft team to insure timelines and deliverables were on track and to refine the scope or the engagement when required.
• Prepared supporting documentation and completed numerous HIPPA, NYS DFS 500, Info Sec, SwissRe and vendor security evaluation, questionnaires and compliance surveys.
• Managed the daily SCRUM process for the iptiQ Infrastructure team, requests for new environment, application POC’s, cloud platform and data access, creation of user accounts, sandbox, testing, refinement of ARM templates, code promotion/releases, production/platform integration, opening of network assets and dashboard analysis via MS Azure portal, refinement of Firewall and security policies.
• Constructed a projection model and tracked the monthly costs/resource utilization for consultants, full time employees, PaaS offerings and the associated support models for each role and vendor.
• Distributed weekly and on demand status, dashboards as well and meeting minutes, change and approval requests,

Confidential

Director IT Security Architecture

Responsibilities:

• Implemented Global IT Security Architecture as a service (ITSA) program, insuring compliance with the newly redefined IT Security policies for US federal and international FX) regulatory, CLS Legal, business requirements and new product security reviews. Managed security relationships with CLS business partners, third party service providers and vendors security/compliance evaluations and audits.
• As the initial point of contact for the IT Security Architecture team I conducted the initial triage, project analysis and assignment of IT Security Architecture resources to each CLS project. Interfacing directly with the E and C level business representatives at CLS to insure IT Security Architecture's early involvement in every project.
• Insured that all vendors were evaluated by CLS IT Security Architecture as part of functionality, security, legal and infrastructure readiness surveys and CLS Audit Control mandates.
• Conducted RFI, RFP and POC's prior to purchase of new solutions or significant upgrade impacting the CLS FX Core applications or as part of the expansion of CLS Now/CLS Net, Distributed Ledger Technology / Blockchain solutions.
• Routinely met internal CLS Business teams to define the scope of functionalities required, the potential security impacts, then review how the vendors solutions would comply or violate the security policies. Publish remediation steps and time lines
• Kept Info Sec team closely engaged with the CLS ePMO, Vendor Management, legal and Audit/Compliance to insure all audit and compliance level documentation and policies for each security stage gate were met and correctly stored for full project transparency.

Confidential, New York, NY

Sr. Infrastructure/Technical Program Manager

Responsibilities:

• Currently overseeing all aspects of the global deployment of VoIP, Skype for Business, Lync migrations, Network & Security upgrades and Data Center Infrastructure build out for 135 sites in 35 countries for Estee Lauder. Managing several 3rd party providers in each region.
• Leading a team of 65 technologist and Architects, 30 PM's and 50 Field Service Engineers across 3 programs over 12 months.
• Worked closely with the client to build a comprehensive site analysis, resource and deployment plan to coordinate infrastructure upgrades, Lync 2010 migrations, Office 365, Skype for Business and training, this included coordination of IVR, CSP, SIP, DID Audio Codes and licenses, Server Site SQL, SaaS, MS Best Practices for hardware/software configurations and metrics.
• Key Technical Lead interfacing with Legal for the documentation and creation of Global/Master Service Agreements, SOW's and SLA's
• Managing PMO, Technical and Vendor resources for APAC, EMEA, North America, Latin America, for HCL, Net Call, AT&T, Telstra and SunGard. This was critical in providing infrastructure, network and security services globally.
• Single point of escalation for all internal and external communications, issue resolution to client senior management.
• Controlled budgets for PMO, Technical, Field Services, T&E and procurement. Assessing the financial impact to schedule and requirement changes.
• Implemented virtual servers using VMware in APAC, EMEA and North America data centers to support collaboration tools, telephony, IVR and SaaS deliverables.
• Responsible for global procurement, change management, site evaluation, network readiness and documentation of current state, gap analysis, and future state presentation and client approval processes. Implemented a multi-vendor change management notification, tracking and approval process to insure transparency for all global partnerships.
• Implemented a PMO audit and governance cadence to insure the proper planning/analysis, build/testing, implementation, project closure and lessons learned processes. The PMO was a hybrid Agile and Waterfall practice utilizing Agile processes for requirements gather and vetting, QA Testing and Bug/Defect remediation’s. Introduced a more robust Change, Issue and Risk evaluation process to provide greater transparency and reporting options.
• Prepare daily and weekly status to C & E lever management on scheduling, costs, risks and completion percentages.
• Review/updates to program, project and deployment plans for all sites. Chair internal team progress and issue resolution sessions.