• Information security and risk management consulting• Strategic planning• Organizational transformation • Developing high performance teams

Led the evolution of a global Enterprise Technology Risk Governance model and framework. Communicated risk management policies, guidelines and standards ensuring security and technology risks were identified and managed effectively. Provided strategic leadership, vision and on-going support to IT and business line leaders regarding information technology risk and security best practices.• Provided direction, support and oversight for management of security and technology risks of core systems and applications.• Proactively identified potential risk exposures within new technology solutions being designed and implemented, and partnered with Technology and Application Development teams and Corporate Security groups to implement appropriate solutions to mitigate exposure.• Established and oversaw the Security and Technology risk management infrastructure and ensured practices were consistent with regulatory expectations and industry sound practices. • Provided IT risk management consulting to the business, technical and operations groups.• Oversaw risk and vulnerability assessments of the business systems and applications, and facilitated compliance/control reviews and associated remediation efforts.• Drove effective implementation and communication of all Technology risk mgmt. policies and guidelines.• Utilized available risk management tools (NBPRA, MRI, RCSA, KRI’s, Loss event data) in conjunction with other environmental changes to proactively monitor the Technology control environment and identify and address potential weaknesses and/or gaps in a timely manner.• Developed effective Technology risk reporting and other communication channels to ensure timely escalation of significant risk issues.• Served as liaison with other Risk disciplines, internal departments, Regulators and other external parties.

Worked with Co-CISO partner to develop, implement and monitor a comprehensive enterprise information security and risk management program to ensure the integrity, confidentiality and availability of corporate information assets• Provide analysis and advice to executive management on a broad range of information security topics• Partner with Corporate Compliance, Internal Audit, Legal and Human Resources management teams to provide guidance to the Enterprise Risk Management committee• Create and facilitate the information security risk assessment process, including reporting and oversight of remediation efforts to address negative findings• Work directly with business units to facilitate information risk analysis and risk management processes• Establish organizational security policies and standards, and ensure compliance with applicable laws, regulations and policies• Develop and manage information security budgets and monitor for variances• Manage the enterprise's information security organization including hiring, training, staff development, and performance management• Create and manage information security and risk management awareness training programs for all employees, contractors and approved system users• Collaborate with enterprise architecture teams to ensure alignment between the security and enterprise architectures, thus coordinating the strategic planning implicit in these architectures • Lead management of security incidents and events to protect corporate IT assets, including intellectual property, fixed assets and the company's brand reputation• Develop business-relevant metrics to measure the effectiveness and maturity of the program

Director IT & Security Programs:• Established secure IT organization and capability to support Government Solutions Group• Grew high performing organization from inception to > 60 people w/ $12 M budget• Drove implementation of integrated architecture, improving cycle time and reducing costs• Delivered critical services within budget, enabling market expansion and revenue protection• Improved client experience by implementing key programs, including identity and access management, portfolio management, etc. • Exceeded operational targets for network and data center• Integrated personnel security function into organization and initiated process improvements• Cross-functional leadership: − Strengthened risk management as a member of corporate Risk and Resiliency Operating Committee − Improved alignment of identity and access management as part of the IAC working group − Ensured readiness of move to IPV6 as a core team member of Engineering’s IPv6 RoundtableIT Senior Manager, Japan• Delivered process engineering and automation integration, in a multi-theatre environment, for the Customer Service and Order Management portion of the supply chain.• Established localized expertise and capacity to enable business expansion and address customer service challenges, including data management and reporting.IT Manager, Americas Sales & CSE• Established consultative planning processes to identify, define, and prioritize IT investments.• Created strategic operations plans at both team and organizational levels.• Defined and implemented IT governance processes for architecture, organizational development, and financial management.• Delivered data management and process automation solutions for CRM, Order Mgt., and Engineering portions of the supply chain.

Senior Manager, Backbone Operations• Led transition of electronic messaging to a single globally managed service.• Recruited 5 Backbone operations teams and managed transition to live 7 x 24 operations support.• Managed daily operations including: procurement, configuration, monitoring, escalation, integration, and root cause analysis of enterprise messaging backbone - 200 servers, >75,000 clients.• Established global SLAs and processes, including escalation and change management.• Led significant improvements in service availability, delivery times, and employee satisfaction.• Procured and integrated tools to monitor and manage messaging backboneLeadership Development Program, Nortel Networks• Business Process Programme Manager, Maidenhead, UK- Developed Readiness Assessment program for NORTEL's Supply Chain Management initiative- Directed Readiness Assessment activities with Regions and Lines of Business- Led incorporation of Readiness Assessment in Nortel operations programs• Manager, Self-Service Strategic Direction, Enterprise Management Systems, RTP, NC- Provided strategic leadership and direction for evolution of global HR Self Service Program - Managed team of web and database developers, interface specialists, and designers• Staff Manager, Data Management Services- Evaluated data query tools and published results.- Produced and delivered presentations on enterprise data access strategies.- Identified databases of record for key order management data elements• Senior Specialist, Network Application Planning, Nashville, TN- Led industry bench-marking of network applications. Developed and presented evolution strategy to executives and teams.- Prepared formal RFPs, issued to vendors and reviewed responses. Managed user validation trials.