Consulting vCISO

• Nov 2019 - Present

Owner/President

• Aug 2015 - Nov 2019

Consultancy specializing in IT security and compliance program development, cloud migration assessments and technology operations. Extensive experience as a certified VMWare and Cisco Professional and more recently as a AWS Solution Architect building distributed, multi-tier, highly virtualized and secure infrastructure solutions for various mission-critical banking applications such as wires, stops, BAR, ACH and eStatement presentment. Consultancy specializing in IT security and compliance program development, cloud migration assessments and technology operations. Extensive experience as a certified VMWare and Cisco Professional and more recently as a AWS Solution Architect building distributed, multi-tier, highly virtualized and secure infrastructure solutions for various mission-critical banking applications such as wires, stops, BAR, ACH and eStatement presentment.

Sr. Director, Software Development and Technology Services

• May 2010 - Aug 2015

Led 50 person Technology group supporting a $20M+ privately owned banking services firm with over 100 client banks. Reported directly to the CEO. - As Chief Security Officer, built and led IT compliance program including policy and procedure overhaul, information security policy development, BCP/DR planning and annual testing, formal change control and risk assessment reviews. Responsible for successful SSAE16 SOC 1 and SOC 2 Type 2 audits with clean opinion from Grant Thornton. Upgraded compliance was instrumental in landing new multi-billion dollar banks. - Full technology refresh with new processing, storage and network virtualization, MS SQL DB multi-TB clusters. Architected and led $1M+ project across four data centers. - Completely revamped yearly tax season (75% of total annual profit) resulting in zero errors (vs. dozens in prior years) with 3x notices delivered, lower costs and significantly less personnel impact. - Responsible for creating digital products including online payments module, customer Web Portal, and the industry-leading eStatement electronic statement product. - Reorganized and grew IT team from 15 to up to 50 individuals. Infrastructure & Security, Development & QA, CS, Project Implementation and Product teams. Tripled project productivity and reduced expected labor costs by two-thirds with improved DevOps methodology. - Introduced full resource capacity planning and forecasting, team metric collection, new ticketing solution with full SLA tracking, executive reporting and KPI dashboard presentation. Show less

Sr. Director, IT Services and Operations

• May 1996 - Feb 2009

Designed, built, secured and managed all network and processing environments for online banking applications supporting over 400 banks for a $25M Fiserv business unit. - Chief architect and Subject Matter Expert (SME) for all network, systems and telecom infrastructure at Fiserv Banklink Data Centers and 30+ partner sites securely handling wires, stops, ACH, BAR and other banking products for over 400 client banks with hundreds of millions of dollars in daily transactions processed. - Responsible for overall multi-data center operations and Network, Systems, DB and Security teams with an annual budget of $5M and 30 team members. - Security Officer responsible for creating compliance program, ensuring cyber security certification and 10+ years of successful audits: regulatory FFIEC, SAS 70 Type II, CyberTrust/TruSecure Enterprise Security Certification, Fiserv, External and Client directed. - Instituted comprehensive Business Continuity Plan (BCP) with annual testing and independently audited reviews; plan successfully executed during 9/11 Manhattan terrorist attack, 2003 NYC blackout, 2004 data center fiber cut, June 2008 data center water leak disaster. - Fiserv Corporate Technology Group leader responsible for setting IT standards and practices. - Many highly visible projects including Y2k preparation, new data center facility build outs in NYC, Philadelphia and Irving, Tx, full migration to VMWARE virtualization and SANs, MS SQL and Oracle DB clusters, legacy Tymnet network replacement, MPLS VPN, etc. Show less