Michael Bayroff Email & Phone Number

Washington, Dc, Us

Washington D.C. Metro Area

Directing federal and private sector engagements for high-profile clients including: * Department of Health and Human Services (HHS) * Department of Transportation (NHTSA) * Bureau of Land Management (BLM) * Bristol Myers Squibb * AmeriCorps Seniors * Lumen Technologies- Executive Management & Consultation - Provided executive management and strategic consultation to client leadership, ensuring alignment with organizational goals and objectives.- Operational Leadership - Directed day-to-day operations, ensuring timely product delivery and high levels of client satisfaction- Project Design & Leadership - Designed and led project engagements, utilizing Statements of Work (SOW) and industry best practices to ensure successful project outcomes.- Project Management Software - Deployed, configured, and managed project management software, enhancing team productivity and enabling project tracking and reporting.- Automation Solutions - Developed automation solutions that reduced manual tasks, increased efficiency, and reduced delivery time- Standardization & Quality Assurance - Created and implemented Standard Operating Procedures (SOPs), Job Aids, and a QA handbook to standardize operations, improving consistency and quality across projects.

Washington D.C. Metro Area

Infosec Leadership:- Led the evaluation, testing, and deployment of a PCI virtualization SaaS product, significantly reducing Cardholder Data Environment (CDE) footprint.- Successfully descaled applications, devices, and networks from PCI-DSS control audits, ensuring compliance and enhancing security posture.Nationwide Digital Transformation & Tech Refresh Program:- Directed core projects within a nationwide digital transformation and tech refresh program, serving approximately 3,000 personnel.- Designed and implemented a third-party Windows 10 device imaging and quality management program, ensuring high standards and consistency.- Managed the Office 365 migration and training programs, facilitating seamless transitions and improving end-user adoption.- Managed end-user data capture, normalization, and database management, ensuring accurate and accessible information.- Coordinated device distribution logistics, ensuring timely and efficient delivery to all personnel.

Reston, Va

ISO27001 Certification Readiness Program:Directed the design and execution of an ISO27001 certification readiness program, serving as an advisor to the CIO and other executive leadership. The program successfully achieved ISO27001 certification.Key Responsibilities:- Executive Coordination: Collaborated with VPs, CIO, and Directors to educate and prepare staff for engagement with the compliance team.- Program Design: Developed the overall program methodology, timeline, enterprise communication, and engagement strategy.- Compliance Team Leadership: Directed the compliance team in creating key project assets, including the control matrix, communication plan, executive and staff communications, executive dashboard, and Board of Directors presentation materials.- Auditor Liaison: Acted as the primary liaison to the external auditor firm, coordinating information collection, analysis, and feedback.

Tysons, Va

Senior Principal, Office of the CIO: Responsible for enterprise-level initiatives and daily management, including IT policy development, Sarbanes-Oxley (SOX) readiness, software selection, and cost reduction.Corporate IT Policy Development Lead:- Led the design and development of a new corporate IT policy library in collaboration with organizational owners.- Created the policy library to provide internal guidance, ensure compliance, and achieve Sarbanes-Oxley (SOX) readiness.- Scoped the project to include 10 departments, covering: Data Management, Electronic Communication, Data Network, Operations, Device Management, Technology Continuity and Disaster Recovery, Logical and Physical Security, Third-Party Relationships, Enterprise Architecture, Program/Project Management- Aligned policy and control objectives with CobiT 5 and ISO 27001 standards.IT General Controls Lead:- Served as the SOX compliance lead and executive liaison for new internal IT-related projects.- Designed control matrices customized to project-specific SOX IT General Control requirements.- Directed project teams on necessary documentation and infrastructure for compliance.- Reviewed and approved policies, procedures, and supporting documentation for compliance suitability.

Washington D.C. Metro Area

Senior Consulting Manager delivering strategic business consulting and IT services primarily to FAA and DOT clients. Responsible for project P&L, personnel hiring/management, project deliverables, and status reporting. - CobiT 4.1 Maturity assessment; FAA IT departmentLed a consulting team in a comprehensive CobiT (Control Objectives for IT) analysis for an FAA Finance Department o Assessment spanning all 4 CobiT domains and 210 Control Objectives specified in CobiT v4.1 o Design, distribution, and analysis of CobiT maturity self-assessment questionnaire o Planning and interview of 20+ government and contractor personnel o Final written report of 254 pages consisted of individual work papers, maturity rankings, list of risk-prioritized gaps, and recommendations for maturity improvement; Formal presentation deck delivered to FAA CIO and Operations managers o Risk analysis performed based on NIST and FISMA guidance to meet OMB Circular A-123 requirements- Budget Process Tool Integration; FAA Finance departmentAssisted finance group with the specification and identification of a budget development system, including development of a Project charter, Management plan, Product requirements (elicitation and management), Compliant vendor list, Shortfall analysis, and management of the project through the federal Acquisition Management System (AMS). - Contract capture and firm development o Capture manager for federal RFP - Management of response development team/daily status calls, Assembly and review of final proposal, Proposal author o White paper development, Business development activities including Service offering presentation development, RFI development, Consultant training and mentorship - Directed development of a Failure Mode Effect and Criticality Analysis (FMECA) for a US military RFP response; development of FMECA worksheets and narrative writeup of finding results.

Round Rock, Tx

IT Program and Project manager on a high-visibility data-migration projects for multiple concurrent enterprise clients- Development of Overall project plan; IT Security Compliance plan; Security Controls Matrix including objectives and activities; Security procedures documentation; Communications plan; Executive and customer facing status reports- Management of multiple customer engagement through initial discovery, customized data extraction planning, and migration activities. Migration method based on individual client requirements; including secure electronic transfer, deployment of data collection appliance on-premise, and transport of encrypted removable media - Management of a software team dedicated to development and deployment of a versatile data search appliance. Included hardware specification and integration in a production environment.- Project budgeting, purchasing, assembly and management of dedicated engineering teams

Privately held enterprise-software developer, Software as a Service (SaaS) provider and Technical consultancy - AICPA SAS 70 Type II Audit Readiness ProjectService organization operations and security audit; Passed audit with zero exceptions in first round o Managed end-to-end audit process, Point of Contact to external auditor o Performed internal audit based on CobiT control objectives o Managed development of 60+ documents to meet business, operational, and audit objectives - CobiT (4.0) Framework Integration ProjectComprehensive business and IT alignment with CobiT framework o Development of high-level and detailed-level control objectives o Performed assessment of IT Governance, Risk, Ownership, and Contract SLA o Directed staff in the design, development, and deployment of over 60 Policies, Plans, and Procedures - ITIL Service Library Integration ProjectAligned IT operations with all ITIL service areas to ensure ongoing SAS 70 Type II audit compliance and optimization of resources and service delivery. Developed and/or integrated the following: o Service Desk Handbook, External ticketing system, and Email/phone support systems o Company-wide internal ticketing system and escalation procedures o Centralized Configuration Management Database (CMDB) and Known Error Database (KEDB) o Change management policies, procedures, and online tools o Release management policies, procedures, and forms o IT Service Continuity Management plan - Peoplenetz GRC Software Development ProjectFull SDLC project management of the Peoplenetz Orgintelligentz™ ERP product including o Documentation of business requirements, mapping to functional specifications, and GUI design o Development of 5 User manual, Training presentations, and Technical/functional integration guides o Management of internal and 3rd-party development resources

Atlanta, Ga

Lead Client Service Consultant and Project Manager: - Project Manager, Consulting Audit Lead - $3B Private Sector Multinational Client, Domestic/InternationalConcurrent management of 8 domestic and international Sarbanes-Oxley Part 404 engagements o Performed Part 404 GCC testing, consisting of audit and assessment of Computer hardware/software resources and Corporate Change control processes o Developed assessment documentation packages for each site - Consulting Infrastructure Lead - $6B Private Sector clientInfrastructure cost reduction project o Identified Infrastructure saving opportunities of $1.3MM short-term and $1.6MM long-term; included Hardware servers, Virtual servers, Network/SAN, PC/Laptops, Document distribution system, and Printers - Project Manager, Lead Client Service Consultant, $24B Private Sector Bank Client, Maryland VABusiness Process Modeling (BPM) and CobiT Process design project o Comprehensive CobiT audit and Maturity Model assessment and control gap analysis o Mapping to existing standard governance structure across divisions o Design of IT controls tied to Enterprise policies/standards and mapping to CobiT(v4) framework - IT Network-based device fingerprinting and asset reconciliation project – US Federal Government Project manager and Senior client service consultant o Initiative within the Modernization Information Technology Services (MITS) organization o Deployment of network gear to enable internal network scanning including Network, Host, and Device Fingerprint Discovery to provide asset reconciliation data o POC to Computer Security Incident Response Center (CSIRC) for development of a Security Risk Assessment (SRA) and Test Plan

Mba, Management Of Information Systems - Technical Concentration

Masters Certificate, Customer-Focused Product And Service Design

Bachelor Of Science - Bs, Electrical And Electronics Engineering

Activities and Societies: Phi Alpha Delta Professional Engineering Fraternity