Glenn Morton Email & Phone Number

New York City Metropolitan Area

Responsible for Risk Management, Compliance, Business Resilience

New York City Metropolitan Area

Expert in assessing and designing approaches to reduce risk, improve security, increase availability, enhance quality of service, and achieve cost savings across constantly evolving legal, regulatory, and business environments. Subject Matter Expert: Disaster Recovery/Business Continuity/Crisis Management, Third Party Risk Assessment, Change Management, Internal Audit, Data Privacy and Information Security

New Jersey

Responsible for developing new business specializing in 501(c)(3) turn-key programs to help charities create awareness and achieve fund raising goals via community events.

Basel Area, Switzerland

Responsible for information security, IT compliance, records management, information risk management and vendor risk management. Serve as Subject Matter Expert and in-house consultant on a broad range of information security standards and best practices, such as data privacy, business continuity, ISO 27001, CobiT, GxP/CSV, Vendor Risk Management and ITIL. Provide strategic and tactical compliance and risk management guidance for global IT projects, including evaluating and recommending controls and vendor risk management processes, ensuring that information governance and management programs comply with applicable laws, regulations and policies.• Develop and implement business-relevant metrics measuring efficacy of the information governance and management program, supporting appropriate resource allocation and increasing maturity of the program.

East Hanover, New Jersey

Established and enhanced approaches and strategies, resulting in reducing risks; achieving Information Security, Data Privacy, Sarbanes-Oxley, and GxP compliance; and ensuring optimal business continuity. Created Key Performance Indicators to demonstrate effectiveness of programs.Created and implemented an in-house written and oral communication training program specifically designed to improve outcomes during audits and to improving communications during meetings and in emails and voice-mails.Accountable for global Off- shoring Risk Management across 5 Divisions as well as IT Risk Management and Compliance for Pharma U.S. Lead team of 12 in defining and implementing strategies strengthening Information Security and Data Privacy, Sarbanes- Oxley and GxP compliance, Disaster Recovery / Business Continuity Planning, and Risk Assessments for vendors, projects and technologies. Responsible for managing e-discovery program for Pharma U.S.Member of IT and Novartis senior leadership teams.

East Hanover New Jersey/Basel Switzerland

DR/BCP Chosen for the newly established global role to create a standardized approach comprised of methodology, tools, training materials, key performance indicators, and regular reporting, along with regional planning workshops for Business Continuity and Disaster Recovery Planning to be used by all Novartis divisions. The Scope included Crisis Management, Emergency Management, and Business Resilience.Developed and rolled out an IT Business Continuity and Disaster Recovery Planning framework that was adopted as the global standard.• Collaborated with 60 IT Business Continuity Coordinators to successfully roll out the new planning approach to 220 IT locations globally. Sarbanes-OxleyMember of the core team developed and implemented the plan to comply with Sarbanes-Oxley across 51 locations globally, one year ahead of requirements for a foreign company.We partnered with PwC to define the initial scope and develop tools and training guides for the global rollout.Served as the SOX coordinator for Pharma Americas. • Led achievement of Sarbanes-Oxley compliance for all IT organizations across the Americas. Audit Compliance• Directed team in creating strategy and framework for IT governance based on CoBIT and SOX regulations to improve overall compliance and internal audit results.

East Hanover, New Jersey

Created global change management methodology; established a Change Review Committee; built the global change management database; wrote standard operating procedures; and designed and delivered training, resulting in increasing visibility, standardizing the approval and completion of changes across 80 countries, identifying and reducing risks using impact analysis and reports on planned change activity resulting in improved systems availability in the US from 99.68% to 99.94% within 6 months.• Spearheaded the establishment of standards, tools, and training guides to formalize Business Impact Analysis, Disaster Recovery Planning and contracts for Business Recovery Services across 10 countries. Presented U.S. methodology to IT Board in Basel, Switzerland, which was adopted as the global standard for rollout to all countries across the enterprise.• Assumed responsibility for FDA Compliance within Pharma IT US. Developed and implemented a database tracking 1200+ findings for more than 75 audits within the Pharma IT US, which improved the access, update and reporting on outstanding issues. Added standard operating procedures training records and CVs for FDA compliance to the database. These steps resulted in decreased number of yearly internal audits.• Credited with achieving zero unsatisfactory results for over 70 audits since 1997 (100%)• Chosen to manage the HIPPA and Privacy Compliance efforts in partnership with PwC, culminating in the recommendation and creation of the Privacy Officer role.

East Rutherford, New Jersey

Managed day-to-day operations of East Rutherford Data Center, including Computer Operations, Production Control, Change Control, Technical Support, and Tape Library.• Planned, led, and coordinated the deployment of large applications and Federal Reserve District cutovers into the production environment with Data Center meeting all objectives.• Directed the automation of change management, standardization of change control procedures, and enhancement of testing procedures within the Data Center.• Recruited and led team of 8 Quality Assurance Specialists in implementing tools and processes to manage 5,000 monthly changes across 12 sites and 100 annual scheduled tests at 3 data centers. Developed and tested local contingency plan quarterly.