Andy Morrison Email & Phone Number

Ottawa, Ontario, Canada

Ottawa, Canada Area

Ottawa, Canada Area

Leading compliance and risk management programs to maintain IT-related business risk within acceptable levels and meet internal and customer expectations. Program areas encompass risk assessment, risk response, and risk measurement / reporting.

Managed risk by running programs to ensure / improve compliance with general computing controls, payment card industry (PCI) DSS and ISO 9001:2008.

Technical lead with responsibility for delivery of the application. Managing internal and vendor activities to ensure integration of the deliverables.Developed conceptual data models and CRUD matrix.Developed data integration architecture.Completed detailed data conversion map and transformation rules.

Revised section 5970 control activities to: better align with application and infrastructure management practices; and to improve clarity for application and infrastructure management staff. Advised Compliance team and application management staff on security policy and related guidelines and standards. Managed the development server hardening standards and associated compliance approach.Assisted application management staff in developing operational procedures to improve compliance.

Co-lead for Application Portfolio Management project. Developed project approach, plan, budget and senior management presentations. Advisor to project team and management; helped senior management establish application cost reduction targets.Co-lead for OE Integration initiative. Initiated OE data architecture development work; developed statement of work and project plan. Identified and modeled OE project dependencies. Developed charter to formalize OE Integration / PMO project.Guided the development of project charters (senior management presentations) and project plans for all seven OE projects.Advisor to OE project teams during execution. Completed project management activities including status reporting, presentation to Steering Committee, resource management, and project planning.

Defined high-level IA governance model; including goals, principles, policies, processes.Assisted with development of data integration strategy; developed management presentation.Developed project and operational work plans.Identified IA standard best practices and guided standards development work.