SUMMARY

• Management experience in multiple industries. Significant success in, Strategic IT planning, IT Governance, Project Management, Business Continuity (Disaster Recovery), Enterprise Risk Management, ERM and ERP Systems Implementation, Data Center Operations, IT Service Management, Business Development and IT Audit Services.
• Familiar with frameworks such as FISMA, NIST, COSO, HIPAA, ISO and Basel II. Extensive international business related travel experience. Experience conduction business completely exclusively in English as well as Spanish.

Professional Experience

Vendor Management Office Lead

• Perform a “deep dive” and document an accurate understanding of the PCI compliance landscape as it pertains to Optum vendor management requirements
• Develop a future state based solely on my previous experience that is in alignment with PCI DSS standards and identify gaps that require closing.
• Develop project plan, internal testing and review standards and processes required to close gaps, and ensure transparency of process throughout a variety of departments.
• Manage each of the 5 gaps identified as a separate project stream and develop a sustainability model for PCI vendor governance, oversight, reporting and transparency.
• Present project updates via presentations in order to achieve ‘buy - in’ amongst various audit and governance teams

Information Security Consultant

• Scoped, designed, performed and documented results of vendor due diligence reviews based on OCC and GLBA requirements via onsite visits through out the United States.
• Integrated IT security priorities into PMO system implementation process
• Assisted external auditors (KPMG) and regulators with IT SOX, GLBA, FFIEC and OCC documentation.
• Reviewed vendor SOC 1 and SOC 2 (security, privacy and confidentiality) reports in preparation for vendor due diligence reviews.
• Managed IT security program containing multiple projects, by working with resources in areas such as cyber security, access and identity management, network management, accounting, and systems integration.

Senior Meaningful Use Project Manager

• Managed software compliance implementation for roughly 40 clients nationwide
• Created project schedules, charters, and statement of work documentation for each client
• Identified EHR and Meaningful Use compliance requirements via discussions and develop a plan of action.
• Worked with developers, infrastructure teams, HIM teams and clinical staff to provide a solution to the client.
• Managed client relationship with hospital senior management for roughly 40 facilities.

Senior IT Project Manager

• Responsible for highly complex programs involving several work streams.
• Defined project scope and objectives and manage projects through all phase of the project lifecycle.
• Interfaced with all areas affected by the project including end users and IT and business partners.
• Developed detailed work plans, schedules, project estimates, resource plans, and status reports.
• Document and present high level technical system requirements and design via stakeholder interviews (JAD sessions)

Process Assurance/ Senior Project Manager 

• Managed the scoping, completeness and timeliness of execution and quality of Process Assurance (IT Audit and Compliance) and Advisory services (Project Management - System Implementation - PeopleSoft, Oracle and SAP, IT Infrastructure, Business Continuity, IT Security)
• Managed large-scale system and implementation (Oracle, SAP) and development projects as well as IT infrastructure projects for fortune 100 clients.
• Lead and scope large and medium scale business continuity and disaster recovery projects.
• Managed the design, review testing documentation, and create SOC 1 and 2 (security, privacy and confidentiality), type 1 and 2 reports in accordance with the AICPA SSAE 16 standard for a wide variety of clients across several different industries
• Performed both SOX and SOC (SOC 1 and SOC 2) readiness assessments for a multitude of clients (KPMG and E&Y as external auditors)
• Leverage advisory skill set (IT Strategy, ERM, Healthcare IT and Policy, and PMO) where required.

IT Business Advisory Services Manager

• Assisted in developing engagement scope, objectives and execution roadmap for business continuity and disaster recovery, system implementation, PMO audit, IT security and vendor selection projects.
• Managed and directed multiple project teams simultaneously in the execution of internal and external audit engagements (SOX IT controls).
• Managed relationships by facilitating communications with mid to executive-level client contacts. Reviewed work papers and final deliverables to ensure that the appropriate level of quality is attained and that contractual obligations were satisfied.
• Worked with clients in developing scope, and executing roadmaps for IT Business Advisory Services engagements such as PMO development, IT Audit, Vendor selection, ICD-10 readiness, HIPAA evaluations, Meaningful Use, IT Strategy, Enterprise Risk Management, Basel II (model validation) and ITIL implementation.
• Implemented various IT Compliance frameworks for organizations with multiple compliance objectives.
• Executed engagements based on frameworks such as NIST, FISMA, and CSPS.
• Program manager for a variety of complex large and medium sized programs.
• Worked with technologies such as SAP, Oracle, JDE, GE centricity, UNIX, EPIC, McKesson, Meditech, Lawson, DB2 and several other home grown applications.

Consultant/Project Manager

IT/Audit

• Performed, led and managed IT general controls audits (SOX and audit support) and automated control audits for a variety of fortune 500 clients in several industries (Finance and Manufacturing in particular). Evaluated the control effectiveness regarding access, program change, and program development and operations areas.
• Performed SOX assessments, IT audits, and SAS 70 engagements that included evaluating the design and effectiveness for a wide range of IT and business controls. Control evaluations were performed for ERP systems such as Oracle, SAP, EPIC, JDE, iSeries and UNIX.
• Developed templates for test plans and model control policies to serve as a best practice guide for the client’s many geographically dispersed departments.
• Plan and execute the day-to-day activities of IT audit engagements for a variety of clients including system development, package implementation and/or platform reviews

IT Strategy and Performance

• Managed and performed large IT project risk assessments in order to provide recommendations that enable the organization to meet deliverable requirements, budgets and time constraints. Evaluated the effectiveness of client PMO performance and strategic alignment. Participated in the design of client PMO’s for large fortune 500 organizations.
• Project manager for Baseline/Scanning and Event Monitoring projects for large global financial services client during their transition to bank holdings company status. Focal point for all client and KPMG communications.
• PM for BCP gap analysis project. Lead PM for DR impact analysis projects. Performed in depth business impact analyses
• Performed IT governance and vendor management assessments for newly acquired assets. Identified gaps between departmental and corporate policies and methodologies.
• Performed a project risk assessment for data center consolidation project. Identifying governance, strategic, and technical gaps to determine the probability of achieving objectives. Identified value drivers and attached metrics to drivers as part of recommended procedures to the client.
• Developed SLA guidelines and rules of thumb documentation for response to RFP for large auto manufacturing client. Worked with several GTM teams to provide proposal responses in the areas of sourcing, vendor governance and data center operations

Project Manager/Consultant

• Directed meetings at domestic and international client sites to gain an understanding of the organization’s customization needs with respect to Sarbanes-Oxley regulations as well as other areas of business risk.
• Managed client relationships through with client SOX/Healthcare compliance senior management and ensured balance between company goals and customer satisfaction.
• Served as consultant and subject matter expert to several clients simultaneously in order to assist in customizing software to meet the needs of the client most effectively.
• Managed project deliverables, and budgets internally while ensuring that client requirements are met.

Systems Integration Project Manager/Analyst

• Determined project requirements through the identification of and communication with key stakeholders.
• Lead corporate wide anti-virus upgrade project using IBM project management methodologies.
• Assisted and managed the development of business continuity and disaster recovery plans.
• Assisted resolved potential server availability issues proactively by ensuring timely communication between various teams and customers.
• Performed root cause analysis for the occurrence “severity 1” issues related to backup and recovery efforts to systems deemed critical