Ashleigh Laone Email & Phone Number

Holmdel, Nj, Us

Mountain View, Ca, Us

Manages programs for Google Clouds US Public Sector to support existing and new accreditations for FedRAMP, CMMC, DFARS, JISF, and StateRAMPProgram manager lead for CMMC Accreditation Successfully supported the landing of $9b contract with US Government for Google Public Sector by leading DFARS assessment Successfully managed the audit for Google Cloud’s first StateRAMP AccreditationFacilitates annual documentation review for various PubSec System Security Plan reviews

New York, Ny, Us

‣ Manages the IT Governance and Compliance program, including Policy management and adoption for both the Leauge and Clubs, PCI Compliance and support in implementation of new privacy laws.‣ Improved existing process for approval and version controls for NFL Information Security Policies and exemptions.‣ Liaise with internal and external audit teams to understand audit scope, gather evidence requests, and track progress on observations post audit.‣ Established process for governance and oversight of NFL IT Vulnerability Management Process.‣ Oversee governance around various League processes such as IT Contract Management, Vulnerability Management, and Access Management. ‣ Provide Club guidance and support as it relates their audit reports, in order to assist with recommended solutions to mitigate findings.‣ Collaborate with Senior Risk Manager in League-offered risk assessment program, and technology risk management program to ensure alignment to overall GRC processes and policies.‣ Established League Identity & Access Management (IAM) Governance program.‣ Successfully launched pilot for IAM Program – Access Recertification's.

New York, Ny, Us

‣ Led League-wide Identity & Access Management program including system access reviews and provisioning.‣ Began development of NFL IT Vulnerability Management program.‣ Liaise between NFL IT and NFL Legal and Outside Counsel as it relates to forensic investigations, including performing e-discovery as needed.‣ Actively protected the NFL brand by monitoring for all executive and League-owned social media accounts.

New York, Ny, Us

‣ Created a new Information Security Policy and Security Requirements Index set to be used across the League and Clubs.‣ Developed and established process for approval and version controls for NFL Information Security Policies and exemptions.‣ Led Clubs in Policy Adoption exercises to ensure full alignment to new NFL Information Security Policies.‣ Served as a liason between Internal Audit and External Audit as it relates to IT audits.‣ Gathered evidence in order to support Internal/External Audit requests and findings.‣ Initiated department and application access reviews in support of Information Security Policy and Requirements.‣ Successfully implemented a new security awarness program for both the League and all Clubs.‣ Support of compliance management including PCI.‣ Performed GRC oversight as it relates to reporting, selecting new tools, and Club liason.‣ Created NFL IT vendor risk management program process.

New York, New York, Us

‣ Supported the delivery of a strategic transformation program across Moody’s.‣ Executed on the Technology requirements for two Moodys Analytics acquisitions (WebEquity & Lewtan).‣ Mantained $33million budget for Transformation Infrastructue Program. ‣ Created, managed and tracked project documentation in accordance with Moody’s PDLC.‣ Captured key project elements, keeping concise and clear records, and following up action items to closure with appropriate project team member, stakeholder, and subject matter expert.‣ Managed projects by uploading, updating, and creating artifacts in MS SharePoint.‣ Maintained project records in portfolio planning and governance tool: Application Portfolio Project Management (APPM).‣ Supported project managers by drafting budgets, project milestones, and project status reports.‣ Oversaw all financial administration activities from start to finish including requisitions, purchase orders, SOWs, and request for financial approvals.‣ Managed CRAID and alerting project manager with potential conerns.‣ Reviewed program/project meeting minutes to incorporate into the CRAID log to ensure seamless delivery.

New York, Ny, Us

‣ Researched and understood the test plan, requirements and logic behind and new or updated applications going through the SDLC.‣ Created and executed test scripts, use cases, and writing SQL queries in order to validate and analyze over 60 applications of the ML Wealth Management division in order to perform a thorough regression test and use Quality Center (QC) to report and defects or any issues in order for the proper team to find a resolution.‣ Analyzed output by using MS Excel and comparison tools to ensure the backend and the output to ensure the application and reports are as per expectations.‣ Creating, running, and modifying SQL queries and manipulate data by pulling data from the back end to analyze and resolve projections for the Estimated Income application.‣ Gathered data by joining information gathering sessions with business stakeholders (Financial Advisors) to gain a well-rounded understanding of the business expectations and prepared to create SRS’s.‣ Utilized tools including MS Excel, MS Office, SAP, SQL Server, SQL, Quality Center (QC), SharePoint.