SUMMARY

• Experienced IT/IS program/project manager focused on delivering global business and technology programs to a broad range of sectors, such as Financial, Telecom, Manufacturing and Pharmaceutical. Well versed at developing and presenting cost effective solutions to executive management.
• Proven ability to execute business plans that reduce operational costs, increase business performance, satisfy regulatory mandates and exceed client expectations.
• Creating plans for “C/Senior Level” executives on strategic and tactical initiatives based on initial cost delivery estimates through achieving long term TCO commitments (incl OPS uptake & optimization).
• Responding to mandates from Regulatory bodies, such as the SEC, FINRA, OCC, and the FTC.
• Managing information security projects based on Cyber Kill Chain programs.
• Governing Data Center security remediation efforts including hybridization plans for cloud infrastructure.
• Managing technology related M&A efforts for system selection, consolidation, data migration/federation, sun - setting products/services as well as cost/benefit analysis.
• Managing IT/IS Risk and Compliance programs based on COBIT, ISO and NIST governance frameworks.
• Executing Information Security audit & compliance initiatives including policy and procedural definitions, planning IT and business remediation efforts as well as attestation of control effectiveness.
• Controlling the execution of multi-national business and technology initiatives at the program level from initial scope through close-out and reporting up to the portfolio level.

PROFESSIONAL EXPERIENCE

Confidential

Cyber Security Program Manager

Responsibilities:

• Managed 26 projects within the program that addressed NIST based security gaps identified and prioritized by regulators, auditors and business leaders.
• Controlled program financials by throttling back projects capital and/or expense cash flow based on risk appetite, budgetary constraints and business value realization.
• Performed financial analysis on a monthly basis to ensure resource allocations were fully optimized, projects remained on schedule and global budgets remained within variances allowed by corporate finance.
• Governed the creation/updates of business cases, budgets and project plans that closed 18 projects and funded remaining remediation efforts.
• Reviewed and opined on control effectiveness to manage/eliminate identified risks as well as determine sustainability based on operational cost uptake.

Confidential

Infrastructure Program Manager

Responsibilities:

• Prepared the business case for the Capital Appropriation Review Board to fund $6MM in new hardware.
• Governed a $2MM Health Check program to upgrade VIOS, migrate AIX servers, implement BladeLogic patch management and coordinate the movement of all production servers (~400) to PowerHA (High Availability failover).
• Matrix managed new equipment implementations across Architecture, Hardware, Network, SAN, Security, Engineering, Operations and Go-Live Teams.
• Partnered with technology, service management and business executives to streamline the build and implementation processes for hardware (IaaS) from 3 months to less than 1 week.
• Ensure all changes followed Service Management processes (ITIL based) and were entered into the change/configuration management system (ServiceNow) for business and tower lead approvals.

Confidential

Global Information Security Program Manager

Responsibilities:

• Perform gap analysis and business case development for multi-year budget planning across CITI business sectors and operational support teams.
• Govern program delivery for sensitive data management, identity access management - OIM (role based user entitlements - least privileged), Security Operations Center (unauthorized access and threat prevention & detection) ArcSight SIEM automation, third party vendor assessments and creation of the cyber intelligence security fusion center.
• Executed the roll-out of Temporary Privilege Access Management appliances (Dell) globally to control privileged access for system / data base administrators and developers. Project included global identification of technology and business owner approvers for applications and infrastructure and integration with in-Country access repositories.
• Lead the creation of charters, books of work, budgets, and project plans for the strategic set of global initiatives.
• Defined and implemented requirements to load program financial data into the Global Risk and Compliance system (Archer) for tracking burn rates as well as program artifacts for regulatory and audit reviews into the ECM Platform/Filenet.
• Define risks, issues and change management processes as well as metrics delivered to various global stakeholders including committees, executive management, and external regulatory bodies that addressed program health and risk remediation efforts.

Confidential

Program Release Manager

Responsibilities:

• Implemented Bid/Offer trade process for Fixed Income products such as Muni’s, Corporate, Agencies, Treasury’s and New Issue / Secondary CD’s to the online platform.
• Implemented new application security features, SSO multi-factor authentication with federated (SAML) access so the user could access all their data from disparate backed systems based on one login.
• Managed quarterly releases (avg $1.25M) across various functional areas of Global Wealth Management including Portfolio Accounts (CMA, 401k, SEP...), Market Data, Research and Trading (Equities, ETF’s, Mutual Funds and Options).
• Performed analysis for a new market data vendor based on feasibility studies focused on products, usage models, through-put and cost.
• Governed high risk/visibility projects to ensure onshore and offshore development resources met their deliverables while adhering to all aspects of the corporate SDLC methodology.
• Achieved successful implementations by facilitating daily meetings with business and technology leads that ensured requirements were developed as documented, defects prioritized and program release showstopper issues were escalated appropriately to meet sprint based objectives.

Confidential

IT/IS Risk Program Manager

Responsibilities:

• Defined Segregation of Duties (SOD) toxic relationship rules/requirements across finance and created a systemic quarterly financial entitlements access review program.
• Assessed deficiencies of the NYSE Trade Processing Online Comparison System (OCS) used to match executed trades as well as busts based on regulatory requirements.