Damion Johnson Email & Phone Number

New York, Ny, Us

Leading all aspects of Information Security including:- Data Privacy (GDPR and CCPA)- Threat & Vulnerability Management- Disaster Recovery (DR) & Business Continuity Planning (BCP)- Risk Management- Third-party risk management (TPRM)

New York, Ny, Us

• Designed SOX Playbook to standardize and ensure process & procedure repeatability as it relates to Infrastructure Services’ (IS) staff interactions with Internal and External Audit. In addition, created templates and guidelines for evidence submission and walkthroughs.• Designed and led the creation of automated monitoring processes for key SOX controls, to ensure operating effectiveness.• Created process for all recertification / Identity & Access Management post decision activities within Infrastructure Services & Information Risk. • Authored critical memos to internal and external governing entities regarding various control states and remediation actions.• Prepared Infrastructure teams for all walkthroughs with Information Security, Internal and External Audit.• Conducted Operation Resiliency Game Day (ORGD) Testing to validate the “live” resiliency of key infrastructure / applications component within critical environments• Provided leadership and governance for all Disaster Recovery (DR) and Operational Resiliency (OR) activities for critical components and applications (Tier-0 and Tier-1 components)• Implemented metrics dashboard for key Disaster Recovery & Operational Resiliency KPIs to facilitate optimized management of domain.• Designed processes to facilitate Business Continuity Planning (BCP) events (telecom redirection automation, SOPs for worksite recovery, interfaces with ServiceNow)• Led the team through various table-top exercises to ensure readiness of Operation staff for resiliency incidents.• Executed various enterprise Disaster Recovery & Operational Recovery exercises and led all post remediation action items (if required).• Led Patching & Vulnerability process remediation efforts across Application and Infrastructure domains.• Infrastructure Services (IS) liaison for Information Security program / project initiatives (Patching & Vulnerability Management, Vulnerability Logs, Compliance, etc.) and subject matter expertise.

New York, Ny, Us

• Executed the program utilizing a custom Agile framework to ensure rapid feedback and turnaround of deliverables.• Reduced the provision time of key environmental components by 40% and reduction of defects by 90%.• Provided additional utilities and processes for Developers & Operational resources to facilitate trouble shooting and deployment verifications.• Conceptualized and executed the first annual Moody’s DevOps Fair, to increase the IQ and awareness of the organization as it related to DevOps.• Worked with key vendors to create optimal Managed Service agreement to drive efficiency and lower annual costs by $1 million.• Designed Release Readiness scorecard to facilitate transparency of Release Readiness to various Operations and Application Development teams and management.• Implemented Puppet Configuration Management tool with the Infrastructure Services (IS) to standardize the provisioning key components with Infrastructure and Application domains.• Led Design and Implementation teams in efforts to further enhance the CARA framework to facilitate additional application onboarding.• Collaborated with several teams (DBA & Middleware, Workload Automation, etc.) within IT to integrate various tools into the Continuous Delivery (CD) pipeline.

New York, Ny, Us

• Created the GRM organization consisting of Release & Deployment Management, Testing Environment Management (TEMG), Change Management, and Release Review Board (RRB).• Designed and chaired the Release Review Board (RRB), a governing body of cross line-of-business IT stakeholders and SMEs charged with ensuring optimization of Managed Service spend and Release readiness and quality.• Led TEMG charged with the optimal usage and operations of critical test and end-user environments, supporting various critical Regulatory, Compliance, and Infrastructure & Cyber Security projects and initiatives.• Implemented CA Application Release Automation (CARA) processes and tools to reduce deployment duration by 60%-90%• Managed Release & Deployment of over 1,000+ Application and Infrastructure Releases per year.• Led the remediation and operational management of the Change Management (CM) function, which ensured all changes throughout the organization were timely logged, appropriately approved, and tracked to completion.• Created an operations domain Managed Services (MS) agreement to drive efficiency and lower annual costs by $1.7 million • Implemented and utilized a metrics dashboard to highlight areas of focus and provide transparency to management teams.• Led the Service Transformation Program (STP), with a $600K budget and a staff of 20+ people, which is responsible for maturing and reengineering the Service Management area and ITIL processes (Problem Management, Incident Management, Request Management/Fulfillment, Release Management, Change Management, Service Desk, etc.)• Established and directed the Knowledge Transfer (KT) process to ensure Production Support was able to support and manage application(s) T+1 after production deployment.• Implemented the Evolven configuration comparison tool, to ensure functional stability/predictability as code is promoted throughout the environments (DEV, QA, Staging, and Production).

New York, Ny, Us

• Managed the $2.1 million budget Disaster Recovery Program (DRP) with a staff of 5 people to ensure that critical applications are properly documented and are able to fail-over to back-up data center • Led Moody’s application and infrastructure recovery efforts during the Tokyo tsunami disaster of 2011• Managed daily operations for the Workload Automation Team, which is responsible for all batch processes and automation integration• Managed Database & Middleware Operations teams for business-as-usual (BAU) activities.• Led and enhanced the Production Support team and processes (Incident Management, Change Management, Problem Management, and Request Fulfilment) for critical systems (Publishing and Moodys.com). • Created and managed the Software Configuration Management Group (SCM) of 3 onshore and 5 offshore people, with a $1.3 million budget, to standardize the composition, build and deployment of application components.• Promoted Infrastructure Services process awareness and enhanced event management/monitoring capabilities for Tier-1 applications and components• Collaborated with the Moody’s Analytics business unit for “white-glove” service provisioning for Incident & Release Management, and hardware provisioning.

New York, Ny, Us

• Led and supervised 300+ personnel in the migration of thousands of servers located in the company’s data center to new regional centers across the U.S. within 7 months at a cost of $1.2 million with a dedicated staff of 10 resources.• Organized, structured and designed migration processes by working closely with vendors and technical teams to transfer critical infrastructure and application assets• Facilitated the resolution of technical issues involving data transfer, component performance, infrastructure, and application development that resulted in successful Data Center migrations• Led the UNIX Refresh Program (URP) for the entire MCO, which included software upgrades, code remediation, and configuration management ($4 million budget, 5 core resources and a 150-matrix staff)• Managed the overall Sybase and AIX 5.3 Upgrade (SAUP) Program, including managing a budget of $3 million for hardware, software, and consulting costs (Total $5.6 million budget, 6 core resources, and a 150+ matrix staff• Administered a budget of $6 million for consulting related to the Module 3 Data Architecture program; Assisted in the integration of external technology groups with new tools and platforms (AIX, Informatica & WAS).• Introduced various CMM processes and artifacts to further enhance project management practices.

New York, Ny, Us

As Project Manager/Associate: Led projects in Global Credit Risk Management and Investment Banking, for critical applications such as Pharos and Prism to ensure CMM Level 2 compliance across all the portfolio  Documented and optimized SDLC processes to ensure seamless integration with in-flight and “Greenfield” projects Co-designed specific J2EE and database components for Global Risk Assessment financial data input Co-designed and co-developed propriety front-end framework to facilitate user interaction with new Business Objects* reporting system Represented technical group within my organization on various cross company/organizational boards (i.e. - Data Governance and Architectural Review Boards) Analyzed metrics and strategized ways to improve productivity, discipline and issue resolution within portfolios As Application Developer: Supervised various teams within Global Research Content/Equities & Investment Banking in developing Morgan Markets Data Access Objects (DAO) for third party access and consumption Developed all administration functionality, redesigned the email notification system, assisted in the development for all Bond Index Pages, and coordinated the merger of historical JP Morgan and Chase taxonomy, research and tools