* * * * * : M e t t a A r c h i l l a - R e s u m e
Metta Archilla
***** *********** **. #****, *******, Texas 77433
*****.********@***.*** (cell) 346-***-****
Objective:
Industry role in Risk Management, HR or Senior Documentation Writer. Professional Profile:
Experienced Senior Technical Writer (over 15 years) and IS Professional (10+ years industry experience) skilled at aligning business processes with technical solutions that meet customer requirements and add measurable value to the company and an experienced presenter on turnkey Corporate Security Awareness programs with regular speaking engagements at various industry conferences and events.
Change Mngt/SOX Controls/Compliance
Enterprise Risk Management
IT Compliance
Security Awareness Program Development,
Implementation, and Execution
Compliance Management and IT Risk
Governance / Project Mngt
Risk Management Software Implementations
Policy/Control/Process, Hardware and Software
Documentation Writing
Sr. Advisor, IT Security, Risk and Compliance
Enbridge Energy
May 2008 – November 2015 (7 years, 6 months) Houston, Texas Charged with the execution of Security Compliance and Risk Management initiatives. Establish and conduct impact assessments for enterprise-wide IT Security Risk Management policies and standards. Responsible for all security related programs such as IT Risk Management and Incident Management. Motivate IT Professionals, Compliance and Security personnel to meet project and compliancy deadlines. Develop Change Management processes and implement technology solutions to meet Risk Management objectives. Developed, implemented and promoted a US centric IT Security Awareness program. Worked alongside HR on new employee onboarding, training and offboarding practices. Resourced as Project Manager representing the US BU on the Risk Management System turnkey installation utilizing the Agile PM deployment methodology. Also, familiar with the Waterfall methodology. This included issues tracking/prioritization and working with the both inhouse development staff and vendor relations on program changes or bug fixes. Worked within both soft (people) and hard (technology) budget constraints to deliver a viable product to the Enterprise Infrastructure Environment.
Served as a key member of the IT Security Council to develop Enterprise Security programs and track progress. US representative to the Modulo RM software selection, program design, data load, testing and implementation of the Enterprise-wide RM program.
Sr. Business Analyst, IT Security and SOX Compliance Enbridge Energy
April 2005 – May 2008 (3 years, 1 months) Houston, Texas Worked with departments of finance, technology and internal audit to ensure a natural compliance with Sarbanes Oxley Act and where deficient created remediation plans, policies as applicable, procedures and flowcharts with the implementation across the Information Security Infrastructure. Created test plans and conducted testing of automatic and manual controls to ensure integrity of financial data. Documented the test results and worked on remediation plans to turn ineffective/failed controls into effective control. Created and updated Risk/Control Matrix to manage financial risk. Identified physical security issues for fixed assets (building, data center, etc.). Participated in business process reviews and simulations to improve efficiency and financial control. 2 P a g e : M e t t a A r c h i l l a - R e s u m e IT SOX Business Analyst
Shell Trading
2004 – 2005 (1 year, contract) Houston, Texas
Captured current state IT infrastructure processes for the Houston trading office. Led the documentation effort to establish a compliance framework of procedures and standards in alignment with key controls for SOX compliance. Helped management in identification, tracking and closure of control gaps/weaknesses. Performed SOX walkthroughs and gap analysis with remediation plans and follow up. Reviewed and corrected narratives that described internal controls with business owners. Tested internal controls, tracked deficiencies and remediation work to ensure that controls operated effectively.
Senior Technical Writer
Baker Hughes
2001 – 2003 (1 year 6 months, contract 1099) Houston, Texas Created Nuclear Technology Documentation to illustrate functional aspects of hardware equipment, components and other electrical or mechanical functionality. Interpret data from rough sketches to plan, layout and product artwork for downhole pigging technology and heavy equipment user manuals and flow diagrams. Developed the baseline of HS&E documentation company-wide to include policies, procedures and incident reporting. Evaluate working conditions and recommend improvements in safety and health methods and practices. Senior Technical Writer/Supervisor
Compaq Computer/HP
1999 – 2001 (3 years) Houston, Texas
Managed a team of contract Technical Document Writers to develop step-by-step software and hardware operational guides for UPS systems for both the consumer and commercial grade industries. Collaborated with product Mangers and Engineers on product, functional specifications and hands-on use of the equipment and installations. Senior Technical Writer 1099 (Consulting)
To include:
Baker Hughes
Shell Oil and Gas
Compaq Computer
Additional Knowledge, Skills and Abilities
Risk Management Systems, Disaster Recovery; End User Change Management; Internal Controls; IT Audit; Governance; Risk; IT Compliance; IT Service Management; Key Performance Indicators; Remedy ITSM; Sarbanes Oxley; SDLC; Service Level Agreements; Remedy; SOX 404; Technical Writing; Testing; Training Delivery; Risk Based Compliance.
*CSOX certified, Modulo Risk Manager Professional certified L3 and past member of Houston CISO Inner Circle.