Michael Oratis Email & Phone Number

Philadelphia, Pa, Us

Manage compliance programs for a number of Comcast Residential and Business products and services. Security requirements prescribed by PCI DSS, NIST SP 800-53, and AICPA TSC (SOC 2).Provide ongoing consultation to product teams for achieving and maintaining PCI compliance.

Philadelphia, Pa, Us

Established a metrics-based continuous monitoring program for key PCI DSS requirements.Authored risk assessment process including an original risk model using principles from NIST SP 800-30.

Philadelphia, Pa, Us

Co-developed a DMAIC cycle-based strategy for improving business processes within the University’s research enterprise; created and deployed a data analysis methodology that identified five process areas in most need of improvement.Co-developed and implemented a program governance structure comprised of senior faculty representing the University's research community for a new initiative under the Office of the Vice Provost for Research.

San Diego, Ca, Us

Provided leadership and supervision to a team of seven senior information system security engineers / senior IT auditors and ten contractors that delivered information security and IT engineering services to a growing project portfolio.Created a cybersecurity strategy for the Command and Control Department (1000+ personnel) that used a metrics-based approach for identifying systems at risk of failing to maintain compliance with information security requirements.

San Diego, Ca, Us

Provided expert information security consulting services to a wide range of federal customers. Roles included information system security manager, senior IT auditor, project manager, and contracting officer representative.Projects included rebuilding a laboratory network infrastructure for a Navy R&D component; operationalizing the Coast Guard Cyber Command; delivering a hardening technology infrastructure to the I Marine Expeditionary Force; providing embedded information security experts onsite at Coast Guard Headquarters.--Obtained designation as an Army Agent of the Certification Authority (ACA), trusted with conducting IT security audits and risk assessments of Army information systems; served as the only Navy ACA team on a roster of 12 for the entire Army. Developed IT audit methodology using NIST, DoD, Army, and Navy best practices.Served on source selection evaluation board for two multi-year cybersecurity contracts worth $42+ million; provided recommendations for contract award based on evaluation of written proposals and oral presentations.Represented the Command and Control Department (1000+ personnel) at SPAWAR's Project Management Council, an advisory council that serves as the voice of the project management community and supports improvement of project management skills and practices within the organization.Served as technical director for an Office of Naval Research-sponsored Historically Black Colleges and Universities (HBCU) / Minority Institutions (MI) outreach program that included the creation of introductory Cybersecurity lectures and an internship/mentorship program.Co-wrote a research proposal to develop a mathematical model for objectively measuring and quantifying the risk an information system introduces given the vulnerabilities identified by DoD-mandated security tools; defended the proposal to the SPAWAR S&T advisory board.

San Diego, Ca, Us

Served as technology audit lead for engagements with multiple Navy and Coast Guard components. Technologies included military and business information systems deployed on surface, air, and shore platforms.Developed audit methodology and corresponding process. Scope of audits included compliance evaluation of the DoD information assurance controls and the NIST 800-53 security and privacy controls; vulnerability assessment using host- and network-based DoD and commercial security tools; and risk assessment of non-compliant controls and identified vulnerabilities.Granted a Navy invention disclosure award for creating a new methodology to streamline information system vulnerability assessments. Served as information system security officer for a Navy space system acquisition program.

Charlotte, North Carolina, Us

Developed a plant process simulation model for testing an industrial control system mock-up.

Master Of Science (M.S.), Electrical Engineering

Bachelor Of Science (B.S.), Electrical Engineering