I am currently working with the Fidelity Personal Investing Information Security Office, having previously worked to help manage and mitigate risk for both the Asset Management and Enterprise Services Information Security Offices in this same role. Key responsibilities include relationship management between our Enterprise Cyber Security organization and the PI Digital eXperience and Distribution chapters, ensuring our technology senior leadership teams and key risk business partners are aware new cybersecurity initiatives, policy changes, project statuses, and other key cybersecurity risks. This team responds to cybersecurity incidents, participates in creating and revising cybersecurity policy, acts as consultants for IT architects and developers to ensure the BU implements secure applications and platforms, identifies areas of risk where the business needs to strengthen controls, and helps protect key business data, all while allowing the business to operate agilely to deliver to market both timely and securely. This role focuses heavily both on cybersecurity consulting and customer relationship management.

I managed a large team of developers spread across several locations including India. The team was responsible for both production support and development of Asset Management’s legacy AS400 platform. These responsibilities included critical business product lines such as Compliance, Equity & Fixed Income Trading, Reference Data, and Post Trade transmissions. My key responsibilities included managing crisis bridges, improving production stability, strengthening development practices, ensuring development meets evolving business needs, helping transition key functionality away from the legacy platform, key employee retention, managing vendor contracts with Tata Consultancy Services, and directing migration to strategic platforms. During my tenure on this team I was responsible for the AS400 on several key initiatives including, migrating FIL trading off platform to the new CRD application, migrating Equity Trading off platform to Insight, transitioning compliance Aggregate Monitoring to the new Regulatory Limits Engine application, interfacing with the GEM Preclearance application to apply AS400 trading restrictions, and transitioning AS400 fund information from the legacy FOCAS accounting system to Invest/1.

I worked as a senior manager in a technology risk management group. Management responsibilities included managing multiple high level projects tracked by senior management and full time employees both in the U.S. and overseas in India. Additional responsibilities over this time have included budgeting, acting as alternate Information Security Officer (ISO), helping create security policy, tracking risk metrics, and ensuring compliance for all platform operating systems, focusing on Solaris, AIX, Linux, and Windows. Projects have included increasing controls for GenericIDs and developing required tracking software, generating security reports and working with audit, securing international desktop builds, traveling to vendors with access to Fidelity data and conducting security reviews/audits, implementing a password vault, managing all local privileged accounts, packaging and deploying Kerberos, testing scanning tools, signing off on operating system builds, and acquiring, documenting, and managing security administration on all supported platforms and databases. Other responsibilities have included weekly progress reporting for multiple groups, assessing and issuing vulnerability alerts, change management sign off for security, and participation and management of a 7x24 on-call rotation.

I worked as a contract UNIX systems administrator supporting a network of HP-UX 10.x, HP-UX 9.x, SunOS 4.x, SunOS 5.x, Linux 2.x, and Windows NT 4.x systems. Responsibilities included internetworking for the above operating systems (with Samba and GNU tools), supporting users under various CAD development and revision control software (such as Pro Engineer, Cadra Solidworks, and Pro PDM), sending and receiving files to and from vendors, printer management, shell scripting, kernel updates, hardware installation and repair, DNS configuration, operating system installation and configuration, and tape backups.

I worked as a C/FORTRAN UNIX programmer; involving designing, developing, and maintaining large multi-process UNIX programs, classified to the Secret level (NATO and COMSEC briefings); this included travel to various locations in California, alone and with coworkers, to install, update, and/or demo software and hardware at customer locations. Other responsibilities included administering a classified network of HP-UX and SunOS systems; including kernel updates, hardware and driver installation, NIS maintenance, operating system installation and configuration, user support, and tape backups; Also responsible for giving programming orientation and guidance to new employees.

Worked as a quality assurance programmer, writing automated scripts to test search engines (PLWeb 2.0 and 2.1) for a large variety of UNIX platforms (including Sun Solaris, HP-UX, Digital UNIX, and SGI IRIX); also executed test suites for the QA department

Worked as a computer engineer, programming, researching and evaluating computer products for use within the Agency (including TCP/IP stacks and color printers), and doing network analysis, such as router and server performance testing with ProTools Foundation Manager and HP-Analyzers. While employed by the CIA possessed a Top Secret - SCI Clearance.