
A seasoned leader in IT audit and compliance, pragmatic and results-oriented IT Compliance professional with a record of developing and executing internally facing programs to enable stakeholders to achieve big picture goals.
Expert at identifying areas to reduce costs and compliance risk with the identification and implementation of efficiencies.
I have established Internal Compliance Programs; IT processes; facilitating mergers and acquisitions.
Knowledge, Certification and/or understanding in: SOX (COSO, CoBIT), PCI, NSA ROAP, NSA_USGCI, Vendor Management, Privacy (CPNI, HiiPAA, CCPA, CoPPA, NY DFS etc), NIST_CMMC, SOC II, CGEIT, CISA CIPM, PMP, Scrum Master, CIST, PCaOB, IIA, ITIL, CISSP, CPE Cert, ITIL, ISO9000, SixSigma, Contractual Law, Guardian Ad Leidum.
Major Accomplishments: Successful creation, implementation and guidance in all areas of Compliance.
Significant component in a team that holds World Records in Landspeed (North American Eagle)
IT Risk and Compliance Principal Management, working within specified channels to meet any compliance requirements around T-Mobile Risk and Compliance Governance. Meetings as required with SVPs, VPs, Directors and any Stakeholders where applicable, to convey areas of concern and basic progress of initiatives within specified channels. Technical Point of Contact for the Internal Audit, External Audit or Core Team to advise, support and guide specified channel initiatives and remediation programs to success.
· Developed and created internal T-Mobile documentation regarding Risk and Governance
· Developed “Tone at the Top” Governance, Risk and Compliance documents for programs in IT such as Design Effectiveness, Rationalization, Operational Effectiveness (using IIA Standards), SOX, Privacy/CPNI, NSA ROAP, NSA_USGCI, NiST_CMMC, PCI and Change Mgt/SDLC.
· Developed and successfully led the “Fed Regulatory” program with CyberSecurity
· Developed and successfully led the SOX Compliance Team in Engineering
· Developed and successfully created the SDLC program with zero failures
o SDLC remediation, program creation reaching success in less than 1 year.
· Managed CPNI and PCI programs relating to organization
o QA’d CPNI and PCI Program evidence for submission
· Assessed Risk in IT and Governance Tone for any ITGCs (aligning with financial thresholds/appetite as the background)
· Created ITGC Controls for new programs/applications
· Worked with Legal and cross functional teams in developing the NSA ROAP documentation for the Organization
· Worked cross functionally with the PMO for program evidence, training those needed to comply with SDLC Control Objective success within the PMO Teams
· Managed Work Breakdown Structures and timeframes in MS Project for each program
· Created and Managed SOPs, Detailed Daily Operational and Work Plans for SOW Trainings
· Developed program to remediate failed controls, and Management of IT Compliance
· Developed requirements, remediation and communications for SOX methodology
· Worked with automation teams to implement tools to automate compliance and dashboards (KPIs)
· Developed remediation efforts for the specified channel as it related to any/all remediation efforts within operations
· Developed Steering Committee Charter and action items as well as meeting monthly with the steering committee members on progress as it relates to the specified channel in UDG
· Working with the Core Varonis and App support teams to ramp up on the Varonis solution in full, for compliance
· Manage SOX, CPNI (Privacy), NSA, NSA_USGCI, NiST_CMMC, and PCI compliance objectives, removing external audit teams hired to work the program: remediating controls into passing as Satisfactory utilizing implemented various Data governance tools (SNOW, Cyberark, SPLUNK, Tripwire, Varonis) within 1 year
· Working in coordination with Champions for evidence quality
· Utilize other tools within organization for cross compliance advantages, such as Archer (Aurora), CyberArk, Tripwire, Slack, Jira, SPLUNK and ChangeAuditor
· Assessed UDG (Unstructured Data Governance) and aligned with appropriate stakeholders (Varonis Implementation)
· IT Operational Application Support, ensuring application support awareness of new or changes to existing support structure across multiple functional teams
· IT Operational Mgt for new process and organization. Ensuring Security input and compliance, proving value across multiple functional teams · Managing all aspects of large and complex projects throughout the IT infrastructure and software development project lifecycles including project scope, security compliance, schedule, resources, quality, costs and change · Translate project requirements into objectives and tasks, managing task assignment to project resources and reporting on and managing project scope throughout the lifecycle · Developing detail project schedules, resource plans, status reports and influences the effectiveness of a team that integrates multiple functions/disciplines · Manage Executive or Director Meetings, client expectations by solving complex issues and changes when appropriate exercising complex Risk, Issue and Change Management best practices · Interfacing with all areas affected by the project, including end user, services organizations, vendors and implementations partners · Reviewing project deliverables for accuracy, apprises management of issues effecting project status and offers solution to solve the issues · Ensuring satisfactory transfer of custody and control of product upon completion (handoff) and close all project including security complianceIdentified opportunities to improve business process flows and productivity.
Program Management