Douglas H. Email & Phone Number

Elkton, Maryland, United States

Responsible for developing and implementing IT risk management and controls assurance programs utilizing the Servicenow GRC tools (Policy and Compliance, Risk, Audit) and UCF common controls.

St Louis, Missouri, United States

Responsible for implementing processes and procedures to ensure the IT infrastructure was compliant with all relevant standards and frameworks.

Greater St. Louis Area

As a member of the Risk and Compliance practice at MorganFranklin Consulting I help our clients meet their regulatory requirements. These are some of the regulations I'm working with:• OMB Circular A123, Appendix A & D• Federal Information Security Management Act (FISMA), FIPS 199 & FIPS 200• National Institute of Standards and Technology (NIST) publications (i.e. 800-30, 800-37, 800-53,800-66)

Responsible for ensuring that the Informatics organization is deploying and maintaining the corporate IT infrastructure in accordance with government regulations, internal standards and industry best practices. This infrastructure contains clinical, manufacturing, marketing and drug safety data that is regulated by the FDA and international regulatory bodies.Specific responsibilities\accomplishments include:• Implemented a new internal IT audit program designed to ensure Informatics adherence to Standard Operating Procedures (Change Mgmt, Backup and Restore, User Access, etc.)• Implemented a new IT vendor audit program covering all application providers, hosted solution providers, and IT outsourcing vendors.• Provide GxP compliance guidance for Serialization, Country of Origin, and SAP enhancements projects.• Designed and implemented the CSV plan for a major datacenter migration involving physical servers, VMware nodes, Oracle RAC clusters, NAS and SAN systems.• Collaborate with business units and site QA to address and resolve audit findings and CAPAs.• Review and approve IT disaster recovery plans and exercise reports.

Greater St. Louis Area

Project estimator for the Call Center Technology (CCT) – IP Voice team. Any infrastructure or application projects need to be accurately estimated in terms of internal labor hours, offshore labor hours and vendor costs prior to the project being officially funded by the organization. Developing an estimate requires working with the client to gain an accurate understanding of their needs, then working with the impacted engineering teams to ensure their estimates account for all client requirements. Examples of engineering teams I work with are: IVR, CQM, VHT(Virtual Hold Time), Workforce Management, System Test, etc.

Mba, Business

Bs, Mechanical Engineering