Morgan Mitchell Email & Phone Number

Washington, District Of Columbia, United States

The Head of Information Risk, reporting to the Chief Information Security Officer, is responsible for executing a cyber risk governance program to ensure compliance with internal and client requirements, risk analysis, and compliance and control effectiveness. Additional responsibilities include overseeing and managing cyber risk across the enterprise globally.

Washington D.C. Metro Area

The Global Information Risk Manager, under the direction of the Head of Information Risk, is responsible for protecting information assets in support of business objectives and in conformity with firm policies. The Global Information Risk Manager is a core function of the broader Information Security Team and is tasked with continually improving the security posture through providing security-related guidance, developing and assessing compliance with security policies and standards, executing the security risk management approach, and evangelizing security matters throughout the company. In this role, I am held accountable for managing a program which identifies, classifies, remediates, and mitigates security risks and vulnerabilities throughout the firm.

Mclean, Virginia

• Lead an integrated IT team through the execution of audit engagements within schedule/budget • Assist in the development and support of the strategic plan for the internal audit organization• Perform IT audits across the operational environment with a focus on critical business processes. Engagement scope includes (but is not limited to): program management, general IT operations, business and technical resiliency and IT entity level objectives. • Establishing and communicating executive level reports and status material for audit tracking • Serve as a process Improvement liaison for the newly restructured IT Audit organization • Lead the pilot and deployment of new agile methodology tool across the Audit function

Bethesda, Md

• Lead an IT team of 4-8 through the execution of assigned audit engagements within schedule and budget - domestically and internationally • Performance Quality Assessment Reviews for IIA standards and departmental compliance• Perform audits across all aspects of domestic and international IT operations, including: system development, program management, general IT operations, cyber-security, business resiliency and IT entity level objectives. • Establishing and communicating executive level reports and status material for audit tracking

Bethesda, Md

*2014-2015 IT Risk Team Lead – Identification and management of IT related risks that drive the IT Audit Plan, allocation of organization’s audit budget, trend analysis and executive reporting• Perform security audits of IT systems and applications with minimal supervision, ensure accuracy of data, and promote operational efficiency• Executing assigned audit engagements within schedule and budget • Ensure audits are conducted in accordance with IIA standards and departmental procedures• Department of Defense “ACTIVE” Security Clearance Level – SECRET

• Manage the customized deployments of BMC Remedy IT Management Suite components throughout the enterprise and track status for monthly deployment status reporting• Development of the IT Service Management Performance Management Plan • Track Prod Catalog Requests/Updates and update Enterprise Service Portfolio

• Supporting the SP2010 Program through the System Engineering lifecycle: o Technical Assessment of Legacy Service Applications and Functionality, documentation of requirements, application processes, and functionality modeling o Transitional gap analysis, requirements development, process modeling and test case development within TeamDefine and CaliberRM for the As-Is /To-Be Phases o Stakeholder management via reviews with Working Governance teams, peers and system engineers to communicate and refine the transformation strategy. o Risk Management Administration: REMS framework development for data input; Tool Administration; authored the Risk and Opportunity Management Plan o Documentation of Concept of Operations - peer review defect, correction and other supporting processes • SharePoint 2010 Program Site administration

• Strategic Planning: Direct Access business case development; Secure Information Exchange support and the development of the EO IT Lab Guidance and Support Standards • Support security initiatives outlined by the EO CIO Team: Waiver Compliance Process• EO Infrastructure ITSP Business Case Research and Pilot Production: including ConOps, Cost Models and ROI metrics• EO Business Area Unity (home-grown version of SharePoint) deployment, communication and rollout initiative support• Engineering Review Board member - Request process support, creation of the technical list and process documentation

• Provide technical support, incident response and reports for document repository admins for SharePoint and Unity via Incident Response Teams to resolve Remedy incidents relevant to both repositories• Defect/Change Monitoring and billing reconciliations

• Technical Admin for the Passport Portal Consolidation Team • Passport Portal maintenance through the RedDot Content Management Solution tool for enterprise-wide content • Creation and Maintenance of the Enterprise Business Services' CIO communication process and associated sites • Support Special Events, projects sponsored by LM, CIO Webcasts and News Briefs

• Account Management and access control maintenance for EMCS, LMX, and DPM environments• Active respondent for the InfoSec Operations Incident Response Team, BMC Remedy and ITSM • Authorized Requestor support for problem resolution within Registration DB, Active Directory for Users and Computers, and the Domain Resource Administrator.• Support of the ESI Smart Card Initiatives; group reviews for DPM and LMX, ISO SOX Audits, and SAQR Reviews Support

• Supporting the Quality Assurance Team by: o Updating or creating Standard Operating Instructions, Functional Procedures, Requirement Checklists and the creation of a Quality Management Plan draft. o Maintenance of the Mission Success Bulletin Matrix for impact assessments • Communications sub-team support through maintenance of relevant portal content with RedDot

Analyzed Returned Problem Cases. Provided Resolution and disposition for all received cases. Quality Checks on all Incoming Work and Random Checks on Outgoing work.

Masters, Management Information Systems

Bachelor Of Science, Business Management