Michael Distasio Email & Phone Number

Merrimack, Nh, Us

Boston, Ma, Us

Boston, Ma, Us

- Fidelity's External Audit Center of Excellence (50+ external audits including SOC 1, SOC 2, etc.)- Responsible for Fidelity's SOC 1 IT audit report, which is distributed to 30,000+ clients annually - Ensured IT controls are suitably designed and operating effectively - Facilitated control workshops to assess current controls and test procedures- Analyzed new risks and technologies that are impacting Fidelity - Primary liaison for external auditors and Fidelity technology teams - Established guidelines for externally audited systems to use automated deployments - Implemented a new External Audit System Inventory - Implemented audit scoping process ensuring external auditors and Fidelity personnel are in sync with audit expectations

Boston, Ma, Us

• Change manager responsible for implementation, oversight and compliance of Fidelity’s enterprise change management policies and procedures across multiple business units and product lines• Subject matter expert for Fidelity’s ITSM service management tool; ServiceNow. • Team lead responsible for the relationship and support of high-profile business units: Workplace Investments, Personal Investments and Health Care and Benefits Marketplace • Facilitated weekly enterprise change meetings and BU release advisory board meetings with senior leaders to ensure adequate cross-divisional visibility of major changes impacting Fidelity's production environments• Provided internal/external audit support for enterprise change and release management• Led the consolidation of eleven BU change teams into one unit and established a single change policy across the enterprise• Managed contractors and summer interns working for the enterprise change management team

Boston, Ma, Us

• Subject matter expert for Vertex’s IT compliance, change/configuration, and disaster recovery programs • Managed a team of contracted IT compliance associates• Provided internal and external audit support, (SOX, GxP, FDA and HIPAA), which included scoping, controls improvements, and liaison activities between IT teams and auditors/inspectors • Performed administration and support of enterprise-wide ITSM service management tools (MKS and ServiceNow)• Provided oversight and tracking of... - IT events, deviations, root cause, and corrective actions until resolution - Biennial review compliance for IT documents, work instructions, and SOPs - GxP training and compliance - IT system access control • Improved compliance metrics from 65% to >95% for 18 months running • Implemented and facilitated a new Change Review Board meetings with senior IT and business leaders • Designed and implemented a new vendor management and assessment process • Led Disaster Recovery Improvement project ensuring all mission-critical applications were recoverable and in sync with the Vertex business continuity program• Implemented a new standard change attestation process that allowed for low-risk, pre-approved changes

Boston, Ma, Us

• Accountable for all operational and strategic aspects of Vertex’s change/configuration and disaster recovery processes. • Created all relevant SOPs, policies, process flows, and work instructions• Partnered with Vertex compliance groups and external auditors to provide documentation and support for audits, including Sarbanes-Oxley (SOX) and FDA/GxP inspections • Tracked corrective action items and planned temporary departures until root cause identification and resolution • Published metrics and reports based on volume, type, and compliance. Reviewed metrics with the Quality leadership team to identify action plans based on data • Assessed new vendors for disaster recovery processes and testing • Performed emergency response team coordination during disruptive events, and administered the testing of Vertex’s Everbridge Emergency Response and Notification System• Improved CMDB accuracy by working with application/ product owners • Created a disaster recovery testing calendar and worked with business and support teams to schedule testing• Spearheaded effort to require all disaster recovery plans to be kept in a 24/7 repository and backed up regularly

Boston, Ma, Us

• Coordinated and facilitated disaster recovery and business contingency testing for Fidelity Investment's Personal & Workplace Investments organization. • Responsible for creating and implementing disaster recovery strategy and plans for 600+ mainframe and distributed critical applications. • Coordinated with business users, functional managers, and systems support personnel to conduct site recovery exercises throughout the Northeast U.S. at local Fidelity hot sites and SunGard regional facilities.• Evaluated business continuity alternate site seat assignments and cut the number of offsite seats required in half

Boston, Ma, Us

• Performed operational duties for Fidelity’s information security office which included managing the policy exceptions process, performing on-site security reviews at Fidelity’s major sites, and managing the team’s communications to the user community • Managed the enterprise security manager program, ensuring servers were compliant with corporate policies and standards. Created a new automated process to reduce the organization’s violations from 3000+/month to less than 50/month • Managed the unstructured data program, ensuring all world-readable files with confidential information or SSNs were identified and remediated. Improved remediation timeframe from 7 months to 45 days by creating an improved vetting process, and improved organizational communication • Managed the database security patching compliance program. Worked with infrastructure support personnel and business units to ensure multiple database technologies were patched to supported levels. Improved patching compliance percentage from 60% to >95% in less than a year • Responsible for business unit application security reviews where critical application risks were identified, ranked and communicated to application owners and senior management

Boston, Ma, Us

• Responsible for all enterprise disaster recovery testing in Fidelity’s Northeast region. • Ensured business unit disaster recovery plans were documented, current, sufficient, and tested regularly. Addressed deficiencies and reported the recoverability status of critical and customer-facing applications to senior management.• Partnered with Corporate Audit and various Fidelity business units to communicate expectations for recovery and address any open audit items. • Worked with Business Continuity Planners to ensure Fidelity's system resources were available during alternate site desktop recovery exercises throughout the U.S.• Created Fidelity’s response plan to the H1N5 Avian Flu, and was responsible for Fidelity’s pandemic preparedness planning. • Spearheaded the effort to require all DR plans to be kept in a common repository that was backed up and available 24/7. • Developed and spearheaded the effort to create the DR Recoverability Report, a web portal that provided a score for each application’s DR status and hardware dependencies, as well as BU and trend analysis and metrics. • Created the DR Test Plan Template that was used for all distributed computing DR testing. Prior to creating the template, there was no standardization used for test plans.

Boston, Ma, Us

• Performed the Change Manager and Problem/Incident Manager role to ensure a stable and highly available IT infrastructure• Assessed change requests and approved or denied changes based on risk. Trained individuals and departments in the IT Service Management software, and Fidelity’s change and problem/incident processes. • Documented and tracked production incidents, root cause, and corrective actions. Facilitated weekly problem/incident management meetings with senior technical staff and management to review. Provided executive summary reports to senior management, identified trends, and facilitated a critical company-wide Daily Problem Management morning conference call. • Published and distributed a Forward Schedule of Changes, and facilitated a company-wide weekly meeting to review planned activity and identify collisions and risks. • Instituted a new pre-approved change type that allowed for a fast-track change process for low-risk, repeatable changes

Boston, Ma, Us

• Managed a team of 11 employees responsible for computer hardware installation, maintenance, asset management, and tape operations at Fidelity’s Merrimack Data Center• Acted as crisis manager and on-call escalation for all hardware/OS related outages and events in Fidelity data centers• Managed vendors to adhere to Fidelity’s standards of availability, reliability, and quality including vendor response to Fidelity incidents and events• Implemented improved standards for quality, including improved cable management standards, hot/cold aisle placement, etc. Devised and implemented a new fiber cabling trunk system throughout the data center to support the growth of Storage Area Networks.• Using a specific workflow process, supported and maintained a 5-day server installation commitment which included performing OS builds, as well as all hardware related activities. • Responsible for the Merrimack Data Center’s asset inventory, which included a barcode/scanning process that ensured real time updates. • Responsible for all Data Center access in Fidelity’s Merrimack Data Center, as well as giving data center tours to internal and external customers.

Boston, Ma, Us

• Managed all computer hardware related activities in Fidelity’s Dallas data center including installations, upgrades, space planning, preventive maintenance, break / fix support, etc.• Managed multiple vendors to ensure Fidelity data center reliability, stability, and standards were met (CNT, Compaq, EMC, HDS, IBM, STK, SUN, etc.).• Performed I/O Genns and hardware configuration for all Fidelity's mainframes

Armonk, New York, Ny, Us

• Performed break/fix, maintenance, and installation activities for all IBM mainframe systems at customer data centers in the DFW area, (Fidelity, Sprint, Allstate, Mobil, Levi Strauss, Frito Lay, EDS, etc.)• Single point of contact for several critical IBM customers and routinely assigned to difficult customer accounts to improve IBM's relationship• Received multiple customer focus and service awards