Blackstone

Trinity & Lexington Univiersities - No longer in operation as degree granting universities

University of Phoenix

The University of Tulsa

Sapulpa High School

PRRC MDR/ Project Manager/SCRUM Master - ISO 9001 13485 & 27001 -- No W2 roles --

Portland, Oregon, United States

Visdom Inc.

MDR Article 15 PRRC (ISO 13485:2021, ISO 9001, 27001 Lead Auditor) SAFe 5.0 Project Manager

Matrix managed multiple concurrent projects:
-  Private Client 1: Coordinated Bioinformatics Analysis as Project Manager and ISO 13485:2016 Medical Device Assessment as Lead Auditor, Creation of Sharepoint compliance portal
-  Private Client 2: - SCRUM Master for MS Azure development in MS Dev ops for Public Transportation application and conducted software QA in accordance with ISO 27001
-  Private Client 3: a DoD Subcontractor. Conducted Audit and Assessment of ISO 9001 and 27001 documentation repository in Sharepoint. Install & configure ISO dashboard w/reports in IBM Openpages
-  Private Client 4: Identity and Access ISO 27017 audits against Okta Workforce Identity, Thor, OctetString ,Oblix Mulesoft LastPass for Business, BeyondTrust Privileged Remote Access, RSA SecurID Suite, CyberArk, Active Directory, and ADManager Plus, IdM Software, Azure Active Directory Identity Services, Sailpoint, Ping, Phaos, SAP MaXware, SAP HANA  Modules: MM, GRC, HR, IdM and Application Interface Framework (AIF)
-  Responsible for implementing Agile framework and experience and accommodating that framework to work for distributed teams
-  Strove to de-escalate contentious situations between teams and align parties on a path to move forward
-  Hands-on QA role in C#, Angular, React.JS, data modeling and data driven design in MS Azure Cloud Hosted Environment
-  Software Used: Galvanize Rsam dashboard Dell Bhoomi, SAP PI, Basis & Cloud Connector & SAP Cloud Platform Integration, Vertica, Redshift, Hadoop, Spark-Databricks,  Kinesis Spark-Streamin, Kafka, Tableau, Spotfire, Qlikview, Cognos, SAP Business Objects ,AWS, Azure, Docker and Github, Gitlab,  Azure Functions, Cosmos DB, Service Bus, Event Grid, Event Hubs, App Service, Signal R, Azure Service Bus, Subscribe and Publish Architecture, Redis Cache. ETL architecture required to maintain a TSQL, SSIS and ADF ETL data integration solution. Archer, MetricStream, Okta IdAM Forge Rock IdM. BI focused ETL, ODI and reporting via OBIEE.

TaskForce Red

Project Manager/SCRUM Master - Medical  Bioinformatics and Security

- Advised and informed new company leadership on best practices for data warehouse operation and management acting as data warehouse lifecycle SME
-  Prepared investor briefings and trade pamphlets on Bioscience data integration best practices, leading industry applications and required functions such as master data management, entity resolution, data quality assessment, metadata management and the distinction between logical and physical data models, their audience and use.
-  Applied expert knowledge of normalized and dimensional data modeling practices and implementation techniques.
-  Worked with new owners and investors to Analyze company market, and process data, document current and future state business processes and objectives.
-  Advised and informed new company leadership on best practices for data warehouse operation and management acting as data warehouse lifecycle SME
-  Educated new owners regarding CAR-T Managed Care practices,  ICD-10 coding and ISO 13485:2016 FDA 21 CFR Part 820 , FDA QSR, European Medical Device Regulation (EU MDR) QMS,  In Vitro Diagnostic Medical Device Regulation (IVDR) QMS
-  Educated new owners on use of XP, Agile, Kanban and PMI-Disciplined Agile using SAFe 5.0 adapted to research including SCRUM ceremonies, User Story and Enabler Story definition and use of the JIRA tool and Slack to manage SCRUM research teams
-  Designed, build, and measure complex ELT jobs to process disparate data sources and form a high integrity, high quality, clean data asset
-  Clearly documented processes supporting data transformation, data structures, metadata, dependency and workload management.
-  Built and reviewed data pipelines for data ingestion, data cleansing, aggregation, and readying data for consumption
-  Entry of corporate compliance information into Stormfront Ventures (new owner's) instances of SAP HANA GRC and IBM OpenPages GRC (install & configure) compliance tools

Cognova Analytics

VC Acquisition Advisor and IP Steward Re: Cognova Analytics private sale to Stormfront Ventures

- Demonstrated ability to create effective logical and physical data models from complex business data requirements. Able to gather data requirements through analysis of system data, analysis of business processes, and interviews with business subject matter expert
-  Delivered Bioconductor Genomics Pipeline for Personalized Medicine & CRISPr cassette design
-  Delivered coordinated OpenVax pipeline prediction of neo-antigens for Personalized Neo-antigen Vaccines in CAR-T therapy
-  Coordinated Design of CRISPr cassette for Myostatin Enhanced Equestrian Embryo Modification
-  Managed Flow-cytometry gating for phenotypic labelling and high-performance cell sorting
-  Conducted Analysis of large molecular datasets such as raw microarray data, genomic sequence data, and proteomics data for research purposes using Python, R and Geneious 11.4
-  Implementing reporting dashboards for clients in R, Julia, Informatica, Amazon Kinesis Data Analytics, Azure SSAS & Power BI (via DAX), Looker and Tableau
-  ETL/ELT of Genomic datasets using Matillion, Apache Airflow, Sparc in Scala on Hadoop (AWS),  Mulesoft, IBM Infosphere, Informatica ETL for a variety of source data formats such as flat file, XML, and JSON.
-  Integration of genomic database access credentials with client Identity, access and compliance solutions
-  Snowflake Data Lake FDN (Micro-Partition) Meta Data Optimization for DML and Query Pruning,, Snowflake (EP) Expression Property entry, Snowfloake Zero-Copy Clone configuration via Global Services Layer Interface
-  Integration and remote operation of client Shibboleth Consortium, Syncope, Soffid IAM,  OpenAM,Salesforce Identity, OpenIG, Midpoint from Evolveum LastPass,  Gluu,  BeyondTrust Privileged, IdM Software, Azure Active Directory Identity, Soffid, Services, Sailpoint, Ping, Phaos, SAP MaXware & ABAP BRFplus framework rule definition, IdM, GRC, (for FedRamp,  & FDA 21 CFR Part 820 ) ERWin data modeling managing multiple data model versions, PL/SQL & Microsoft T-SQL.

Director Research (Multi Role: SCRUM Master, Data Engineer, AWS Platform Specialist)

- RenewData – ISO 27001 - 3yr Pre Audit Assessment – Digital Forensics Platform
-  Microsoft Contract – ISO 27002/27017 Pre Audit Assessment - Microsoft Azure Platform
-  Microsoft Contract – ISO 27002/27017 Pre Audit Assessment - Microsoft Azure CRM
-  Microsoft Contract – ISO 27002/27017 Pre Audit Assessment - Microsoft Office 360
-  Microsoft Contract – PCI-DSS Pre Audit Assessment - Microsoft Azure Platform
-  Microsoft Contract - ISO 27002 Pre Audit Readiness Assessment for Microsoft SQL Azure
-  Editor: ISO 27017 Cloud Sector Specific ISMS Control

-  Delivered risk assessments aligned with ISO and NIST / FedRAMP, HIPAA and FISMA standards
-  Incorporated controls derived from  ISO27001:2013, ISO 22301, NIST 800-53 Rev 4,  NIST-SP800-30, ISO/IEC 27005, OCTAVE, COSO, COBIT.  OWASP, WASC, SANS, CVE, and CVSS (Threat & Vulnerability classification).
-  Consulted and reviewed the implementation of authentication (SSO, LDAP, AD), authorization (fine grained and course grained), and cryptography (PKI, SSL, kerberos, crypto algorithms) mechanisms within Azure hosted applications.
-  Quickly and with minimal disruption completed SIG questionnaires based on Cloud vendor inherent risk and completed implementation of Vendor Risk Assessment frameworks

eFortresses, Inc.

Lead Auditor - ISO Audit and Assessment– eFortresses

Delivered
-  ISO SC27 JTC 1 - INCITS CS1 in relation to ISO 27017 Cloud Security Standard editorship.
-  URAC Health Plan Accreditation Technical Mapping and Editorial Support
-  DoD Directive 8500.1, "Information Assurance," Technical Mapping and Editorial Support
-  DoD 5025.1-M, "DoD Directives System Procedure" Technical Mapping and Editorial Support
-  DoD Directive 8000.1, "Management of DoD Information Resources and Information Technology,"
-  DoDI 8500-2 IA Control Checklist Technical Mapping and Editorial Support
-  Mapping of German BSI Information Security Standard to UCF Matrix

Demonstrated
-  Superior Knowledge of laws, regulations, policies, and ethics as they relate to medical devices, patient privacy, genomics data, Cybersecurity and privacy.
-  ability to advise on, develop, and implement processes around risk identification, assessment, and remediation, policy exception management, third party cyber risk management, policy management, vulnerability management and remediation.
-  Created SIG questionnaires based on cloud vendor inherent risk and completed implementation of Vendor Risk Assessment frameworks in alignment with UCF
-  Directed others in data gathering, testing, validation, analysis and modeling and mentors others on effective techniques as needed.
-  Displayed knowledge of IT risk management, IT standards and policies formulation

Unified Compliance Framework

Contract Cloud Security & ISO SME

- Responsible for the audit of the selection strategy and deployment of Oracle identity Management components relating to the employment department.
-  Delivered an audit that exposed leadership problems that festered as the agency wasted over $30 million on computer software services. Awarding contracts on a kickback scheme that resulted in the replacement of the senior staff
-  Demonstrated and Delivered audit results based on  ISO27001:2013, ISO 22301, NIST 800-53 Rev 4, Experience with NIST-SP800-30, ISO/IEC 27005, OCTAVE, COSO, COBIT. Knowledge of OWASP, WASC, SANS, CVE, and CVSS (Threat & Vulnerability classification).
Reviewed Oracle implementation of authentication (SSO, LDAP, AD), authorization (fine grained and course grained), and cryptography (PKI, SSL, kerberos, crypto algorithms) mechanisms within State applications.

State of Oregon

Auditor -Oregon  Employment Department

- Promoted to Chief Governance Officer as a result of Archer & Data Domain Acquisition
-  Delivered the direction and trajectory of EMC’s Cloud  Security and Governance, Risk and Compliance strategy
-   Delivered successful acquisition of Archer and Data Domain returning 23 Million to EMC in two years.

From Quarterly Performance Review
-  Demonstrated facilitation, collaboration, documentation, and presentation skills at a senior and executive level.
-  Effective communication skills to communicate project expectations clearly and precisely to different stakeholders.
-  Proven ability to present status and other project critical information to business executives
-  Developed full-scale project plans and associated communications documents.
-  Implemented process Improvement, Project Management, Agile development, multiple organizational communication and influencing
-  Effectively liaised with project stakeholders on an ongoing basis.
-  Accurately estimated the resources and participants needed to achieve project goals.
-  Submitted timely budget proposals, and recommend subsequent budget changes where necessary.
-  Where required, effectively negotiated with other department managers for the acquisition of required personnel from within the company.
-  Efficiently delegated tasks and responsibilities to appropriate personnel
-  Demonstrated effective communication skills to communicate project expectations clearly and precisely to different stakeholders.
-  Promoted facilitation and conflict management skills that enable effective working relationships
-  Delivered spoken and written communications that are compelling, convincing and reassuring, and skills to articulate complex technical ideas to non-technical stakeholders

Acting Chief Governance Officer (Sr. Director pre-Dell Acquisition)

- Published regulatory metric mapping of COBIT, ITIL, ISO27001, NIST 800, FISMA, AN/Z4360, BSI IT, Capability Maturity Model Integration (CMMI), ISF Standard of Good Practice (SoGP), GAIT, GAISP, SAS70, Prince2 to CSA Control Matrix products in conjunction with ISACA & OpenGroup

Cloud Security Alliance

CoChair CSA Control Matrix WG, CoChair CSA Consensus Assessment WG

- Principal strategist for EMC's GRC product line reporting to the office of the CTO
-  Achievement: Acted as virtual CISO for six cloud hosted companies, achieved a zero vulnerability score against PC-DSS DISA STIG’s passing NIST 800.53 & ISO 27002 audit on the first attempt for all six companies
-  Established the Cloud security and IT governance (Archer & Data Domain) product strategy for EMC
-  led integration of Archer to OpenPages GRC and SAP HANA GRC module
-  Assumed role of virtual CISO for Customer Reference Program participants planning, executing, and managing information security and risk management program using Archer & Data Domain.
-  Pre audit PCI-DSS assessment for cloud based approved scanning vendor (ASVs) leading 3 3rd party Qualified Security Assessors (QSAs) and 2 Payment Application Qualified Security Assessors (PA-QSAs) on a total of 6 PCI-DSS engagements.
-  Delivered a zero vulnerabilities exploited metric based on FedRAMP/SCAP and DISA STIG criteria for 24 months in Customer Reference Program clients.
-  Lead team of 40 Developers and Security Subject Matter Experts and business consulting personnel with a $2M annual security budget.
-  Industry Leadership Liaison officer to Cloud Security Alliance, DMTF, ISO, 451 group, OpenGroup, Open Data Center Alliance, OMG, OCEG, ISF, BITS Shared Assessment, DISA, HITRUST, IETF, ISACA and ISSA, ITU.T SC 17, ISO/IEC SC27 CS1, World Economic Forum(Davos) Tech America, Business Software Alliance, US. House of Representatives, Association of Southeast Asian Nations, Kingdom of Thailand, Japan Ministry Information Technology and Trade, Malaysia Technology Development Corporation (MTDC), EU Parliament – INFSO Communications Committee.
-  Accomplishment: Industry leadership role: Appointed: Cloud Security Alliance Global Strategy Director.
-   Creation of  Cloud Control Matrix and Consensus Assessment Initiative Questionnaire
-  ISO ISO 27017 Cloud Security standards editorship

Chief Architect, GRC Office

- Responsible for coordinating the adoption of Banner/Ambit financial SaaS platform information assurance and IT governance for twelve financial services clients.
-  Software Subject Matter Expert Focus: Banner UCM, SAP Cloud ERO and 4/HANA integration, SAP IDM AS, SunGard Ambit banking, Banc Ware Risk & Performance Management, Adaptiv, Protegent, APT and Synchronization Service, Infinisty SaaS/SOA/BPM financial platform, Lawson ERP (Fin Mgmt & Action Alerts), IBM OpenPages, Oracle IdAM.
-  Human Resource Management: Lead 28 developers and consultants in three divisions

SunGard

Director GRC & Identity Services

ORACLE USA Redwood Shores CA

Director GRC Strategy

- Achievement: Promoted to Senior Director as a result of Thor, Logical App’s and Stellent Acquisitions
-  Coordinated cross business unit IT governance and product security under the direction of Oracle Chief Security Architect.
-  Assumed leadership of M&A efforts to build out GRC and IdM product portfolio
-  Lead the Software Development of the Oracle GRC manager Product with a 30 person development team.
-  Designed GRC Manager Product: IT Governance Module, Policy (Legal Compliance) Module-BRD GRC Intelligence Product: PCI DSS Dashboards, FISMA / HSPD-12 Dashboard - BRD (Waterfall SDLC development methodology)
-  Delivered IT Governance Module, Policy (Legal Compliance) Module, Life Science Module
-  Delivered Competitive Intelligence: Microsoft One-Compliance, Microsoft Identity Lifecycle Manager 2007 FP1 & Microsoft Identity Integration Server (MIIS) 2003, Autonomy, Interwoven, Open pages & Agiliance
-  Accomplishment: Lead Development of first commercial integrated GRC & Identity Management solution for Oracle.
-  Director of Product Strategy for the Governance, Risk and Compliance product offerings including GRC Manager, Identity Management Suite, Database Security & Information Lifecycle Management Suite of products in the OracleCloud environment

Sr. Director: Governance, Risk & Compliance Strategy

Oversaw the IT Security and GRC Product enablement in the OracleCloud hosted environment
Achievement: Promoted to Senior Director as a result of Thor, Logical App’s and Stellent Acquisitions Coordinated cross business unit IT governance and product security under the direction of Oracle
Assumed leadership of M&A efforts to build out GRC and IdM product portfolio
Lead the Software Development of the Oracle GRC manager Product with a 30 person development team.
Designed GRC Manager Product: IT Governance Module, Policy (Legal Compliance) Module-BRD GRC Intelligence Product: PCI DSS Dashboards, FISMA / HSPD-12 Dashboard - BRD (Waterfall SDLC development methodology)
-  Delivered IT Governance Module, Policy (Legal Compliance) Module, Life Science Module
-  Delivered Competitive Intelligence: Microsoft One-Compliance, Microsoft Identity Lifecycle Manager 2007 FP1 & Microsoft Identity Integration Server (MIIS) 2003, Autonomy, Interwoven, Open pages & Agiliance
-  Accomplishment: Lead Development of first commercial integrated GRC & Identity Management solution for Oracle.

Technology Business Unit Director

Director – GRC Technology Business Unit – Oracle Corporation	 November 2003 – December 2007
-  Achievement: Established Identity Management Practice from ground level reporting to Oracle Chief Architect Steve Deitrick and founded Oracle GRC Strategy.
-  Delivered  ISO 27002 based ISMS, Risk Management and Regulatory Compliance Solution programs acting as Trusted Advisor and Interim CISO to Oracle Customers and Government entities
-  Managed Analyst Relations for Identity Management and GRC (Gartner, IDC, Forester) resulting in magic quadrant placement for GRC Manager Product in 2007.
-  Published regulatory metric mapping of COBIT, ITIL, ISO27001, NIST 800, FISMA, AN/Z4360, BSI IT, Capability Maturity Model Integration (CMMI), ISF Standard of Good Practice (SoGP), GAIT, GAISP, SAS70, Prince2 to Oracle products in conjunction with ISACA
-  Accomplishment: Matrix managed a team of ten senior level business consultants in sales efforts with $5M ROI.

Technical Director

- Achievement: Product Development: LDAP Directory Proxy Product.
-   Designed and developed a directory and provisioning implementation, compliance regiment for EU Directive 95/46/EC and US DOC Safe Harbor/GLBA.
-  Created and ran the Identity and Information Systems Management program within Sungard consulting services.
-  Coordinated security management across corporate IT, security, legal, ERP (SAP R/3) and HR for clients as virtual CISO.
-  Functioned as a change agent for improvements in security, compliance, and audit of client business-critical systems..

Schlumberger

IdM Directory Practice Director

- Sr. Managing Principal Directory Services- iPlanet Professional Services (AOL) 		1999 - 2001
-  Accomplishment: Founded iPlanet Identity Management Professional Services Organization
-  Sr. Managing Principal Consulting Services- Netscape 					1997 - 1999
-  Accomplishment: Deployed world’s first RFC 1777 LDAP directory Server with Tim Howes and Frank Chen at Ford Systems Integration

Netscape Communications

Directory Services Consultant

- SunGard Ambit banking, Banc Ware Risk & Performance Management, Adaptiv, Protegent, APT and Infinisty SaaS/SOA/BPM financial platform into a coherent IT governance platform and successfully deployed solution.
-  SAP Modules Implemented and Managed: IM, TR, CO, FI, WF, QM, HCM, FS

Commerical Financal Services

Project Management Consultant

- Delivered: SAR R/3 integration with Lotus Domino and OS/2 Java Kernel
-  Managed Tivoli Acquisition Technology Plan
-  Notes Domino & OpenPages Install & Configuration
-  SAP Module Implementation and Management: IDM, IM, FSCD, GRC, FICO, IBP, HR Functional, PO, ABAP/4

Martin Pohlman

Martin Pohlman