Susan Kennedy Email & Phone Number

Consultant in higher education and nonprofit verticals focusing on repositioning the strategic role of IT leadership, developing and executing IT governance frameworks and IT strategic plans, system implementations, PMO, IT services and operations, and assisting institutions to meet their technology related goals. Experience includes leading a Workday Platform HCM, Financials, Payroll implementation and planning activities for the Student Information System phase with a higher education client. Leadership roles included Change Management Lead, Project Manager, and Training Lead while also assisting the VP of Finance and Administration and the CIO with IT Strategic Planning.

Leader of IT Strategic Operations within a 200+ person central IT organization providing enterprise IT Services to a research institution’s 5K employees and 24K student constituents. Provide oversight of a $30M operating budget, Project Management Office, IT Service Management, Human Resources, Communications and IT Governance while working in partnership with academic and administrative leaders to craft and execute the IT strategic plan.Inaugural holder of the AVP, IT Strategic Operations position, charged to define both the role and creating a team to develop integrated processes and unified culture across UD’s central and distributed IT organization; creating uniform practice and culture across IT community to demonstrate alignment of strategy with broader institutional objectives.Founding member of the University’s Women in Technology 130+ member initiative.Designed, planned and implemented IT Governance for the University to ascertain campus-wide IT priorities; facilitate strategic discussions and critical decisions as well as direct the operations of program. In response to the pandemic, facilitated governance to reprioritize projects to realign resources with academic and business continuity needs.Worked on behalf of the CIO and cross-university committees to oversee the development of UD IT’s strategic plan.Fostered a cohesive culture internally and with critical campus partners through new work processes and engagements to create trust and to encourage embracing working beyond silos.

* LED the development/adoption and enforcement of Information Security and Privacy policies, procedures and standards. Conduct and complete regular reviews required by HIPAA and PCI regulations.* Delivered, implemented and managed Information Security Office programs within and throughout the Mid-Atlantic Region. Programs include phishing tests, vulnerability scanning, NIST based risk profile assessment, and Universal Access Governance.* Regularly presented to and engage with executive boards, privacy, and compliance and audit committees.* Architected and executed programs that include Policies, Standards and Controls, Security Awareness and Training, Risk Assessment, Remediation Management, Incident Management and Response, Business Continuity and Third Party Risk.* Through routine security assessments for all new implementations or upgrades, maintained appropriate security measures and mechanisms to guard against unauthorized access to electronically stored and /or transmitted patient data and protect against reasonably anticipated threats and hazards.

Wayne, Pa

Navigate is a management consulting firm focused on helping clients solve their business problems. Provided solutions in the areas of strategy, business operations, technology and risk. Effected project management, organizational change and leadership flow. As a Senior Manager with Navigate who brought over 25 years of extensive experience in business, technology, leadership and compliance, specialized in initiatives that involve executing strategy, governance, technology, audit, compliance, privacy and risk management, operational advancement, system implementation and integration, and project management.

*Provided strategic and technology support for the division's 19 departments, focused on developing positive interpersonal relationships while attaining desired goals* Created IT Governance, ERM, Information Security & Privacy, and Portfolio/Project Management. Programs transformed IT spend to drive strategic divisional goals, leveraged monies to maximize technology, and reduced department silos. * Directed IT strategy, infrastructure, operations, telecommunications and DR; continuity and application development; data storage and archiving; full budget (in excess of $20M); human resources and administrative responsibility for department and associated staff. * Implemented Data Strategy to manage, organize and transform data into information.* Served in a lead capacity of IT managerial and support staff to resolve complex technical problems with computing hardware, software, and network services. * Re-engineered scalable infrastructure for future growth using virtual and cloud-based environments, thus reducing support cost and effort. * Designed a centralized service model that enabled data analysis, problem identification and the elimination of common problems; effected asset life cycles and tracking; reoriented the go-live protocols to be controls driven.* Managed the strategic, financial and operational management strategy of the PennCard office, contributed to the development and realization of the department’s strategic goals, and guided the Department in the establishment of policies and procedures. Operations included the campus transaction system/point of sale systems.* Contributed to the creation of the University’s overall technical strategy by participating on several committees including Institutional Risk Management Council on Information Security, IT Roundtable, IT HR Strategic Committee, Privacy Liaisons, Common Solutions Committee, Network Security/Architecture Committee, Network Planning Taskforce, IT HR Committee and PCI Compliance.

* Established security strategy, policies, standards, and procedures with regard to network communications, backup procedures, security, privacy and business continuity to ensure that information assets were adequately protected.* Led the development, implementation and maintenance of an information security compliance and awareness program; Performed regular evaluations of security controls throughout CHE to ensure compliance with appropriate governmental laws and regulatory requirements, particularly HIPAA, and industry best practice. * Supported the CHE Security Compliance Program for thirty-eight hospitals including CHE business, clinical, and IT leadership.

* Developed the newly established IT Compliance program with a risk-based approach to ensure compliance with Sarbanes-Oxley (SOX) regulation and corporate security policies in an international organization. * Directed the development, coordination, and implementation of a structured compliance program focused on all aspects of information technology (System Implementation and Maintenance, Security and Operations) * Established policies, procedures, and standards that enhance the corporate information security management program.

* Provided leadership and mentoring to information technology audit staff and computer operations management, integrated technology audits with the operational audit teams, and collaborated with the University’s Chief Privacy and Compliance Officers. * Interacted with all levels of management throughout the University and Health System to provide information technology audit oversight and risk management techniques. Led continual risk assessments and developed annual audit plans. Monitored audit progress, measured performance, and redistributed work as required. Reviewed policies, procedures, and systems of internal controls; assisted in assuring compliance with professional standards (COSO and CoBIT) and office procedures. * Experienced in managing and conducting IT Assessments of application development, security, computer facilities and networks. Participated in Operational Audits focused on Revenue, Payroll, AP and Purchasing cycles. Served as Project Leader/Audit Lead during the following undertakings:- Health System Application Implementations and Enhancements including Electronic Health Records, Patient Management Systems, Clinic Systems, and Patient Accounting Systems.- Health system wide ERP system implementation.- Business Continuity and Disaster Recovery Plan.

Bachelor'S Degree, Finance, Business Law, 3.6 Magna Cum Laude Honor2

Master Of Business Administration (M.B.A.), Accounting, 3.6 Magna Cum Laude Honors

Education record