Alfred Federici
Cranford New Jersey 07016
Home 908-***-**** Cell 908-***-****
I have worked successfully as a project manager over the last twenty years focused on the technology industry. The
project managing skills acquired however are transferrable to managing any project to a successful completion. These
skills include:
• Negotiating contracts with vendors
• Acting as the owner’s representative
• Managing vendors and consultants from various sectors
• Providing miles stones for vendors to hold them accountable
• Meeting budgets
• Meeting timetables
• Quality assurance and Accountability"
TECHNOLOGY PROJECT SUMMARY
• Security Technologies: Database monitoring; Dial-in authentication; Digital Certificates; Development, and implementation
of in-house monitoring tools.
• Software: Oracle Audit Vault; RSA Authentication; Verisign; Intrust
KEY SKILLS
• Staff manager, and developer
• Authentication & Access Control implementer
• Management of Attestation process
• Data access remediation
Alfred Federici
• System monitoring across various platforms, and products
• Lead consultant of Network & System Security processes
• Risk Management Interface between Data Security function and the internal Audit department including Banking and
State regulators
• Regulatory Compliance
• Consulted in the In-house data security product development, and implementation process
WORK HISTORY
Brown Brothers Harriman - November 2000 – April 2015 – AVP – Data Security operations, and monitoring manager
• Developed, and executed the IT data access administration staff geared at granting approved resources to
both staff, and external clients
• Project manager assistant for the security interface between Data Security, and HR PeopleSoft
• Co-project managed a project actioned to replace PeopleSoft with Workday
• Lead a task force to resolve the need to monitor the assignment of resources, and created a monitoring function
to review access granted across platforms, databases, dial-ins, and UNIX, LINUX, and REDHAT servers
• Managed a project to restrict access to production resources, and proceeded to establish an Emergency user-
ID process whereby developers, DBAs access was restricted to read only privileges. A process was
implemented to grant the required access via senior management’s approval
• Developed and executed the Security and Administration’s security policies, and procedures
• Participated in the company BPC planning for the data security group
• Project manager to resolve open security issues identified by the Auditing, and Risk management departments
• Managed, supervised, and evaluated personnel, and data security software
• Co-managed projects pertaining to the Change management solution
• Project managed, and completed an effort to install Oracle Audit Vault across all production Oracle, and SQL
databases
• Project managed, and completed a remediation across to removed old user-IDs, and limit access to current
user-IDs from all production databases
• Project managed, and completed on schedule an attestation project to define each job per department, and limit
access to staff, consultants, and temps on a need to have basis
Alfred Federici
• Demonstrated the ability to work successfully in a self-starting environment with little supervision, or guidance
• Spearheaded Risk assessments pertaining to regulatory requirements
• Establish a relationship with DPOPS as a backup to the administration staff during non-banking hours
• Ability to generate meaningful metrics to senior management pertaining to life of a project, and identified areas
where improvements are needed
KPMG – August 1998 – November 2000 – Manager – Data Security Operations manager
• Project managed an effort to implement control staff in support of access granted to staff, and clients
• Project managed, and completed an RSA token project to distribute 25,000 tokens to domestic staff
• Managed the security interface between Data Security, and PeopleSoft
• Managed, and documented a project to publish Administration security policies, and procedures
• Coordinated training for each Administration staff member to ensure redundant staff backup to each job function
• Co-project managed the KPMG BPC recovery plan
• Actioned the BPC plan twice within two days to restore the database, and technology due to two mutually
exclusive outages
Chemical Bank – Chase Bank – April 1987 – August 1998 - AVP – Data Security Operations manager
• Managed data security processing in a mainframe Top Secret environment
• Managed the NT security processes
• Managed the security of a 3rd party Trust security product developed for Chemical Bank, and Chase Bank
• Created data security procedures for the Trust environment
Alfred Federici
Citibank NY – November 1985 – 1987 – Manager – Data Security manager
• Assistant manager within the Customer Services(CS) function using Top Secret in a mainframe environment
• Project managed the quarterly CS internal BPC exercised program – performed quarterly
• Project managed an effort to introduce PC technology to the Data Security department
• Project manager the implementation of 3rd party products as they were acquired by Bank
• Responsible the for resolution of all audit issues pertaining to data security process
Federal Reserve Bank NY – June 1980 – 1985 – Data Security officer
• Established the Data Security group in a Burroughs mainframe environment
• Managed the Space management group
• Liaison between technology, and the user community
• Change management analyst
• Programmed in Cobol
• Data center operations shift leader
MAJOR ACCOMPLISHMENTS
• Project managed, and supervised the Information Security access control groups
o This function grants/updates/removes company-wide staff access to resources based on Senior
management’s approval
• Project managed, and managed the Monitoring, and Reporting function to ensure the approval, and accuracy of
access granted across:
o Mainframe Active Directory
o Oracle databases SQL databases
o High Risk applications RSA Tokens
Alfred Federici
o In-house Web products 3rd party products
• Identified a need for an attestation program to define the access required for each company staff member to
perform their jobs effectively via predefined access
o Project managed, and supervised in conjunction with Technical staff, the implementation of Oracle Audit Vault across
100 Oracle, and SQL databases, and complexes. The end result was 150 daily reports, and numerous pre-
determined alerts of high risk findings
• Instituted a vendor control process to limited access granted to each vendor, and monitor their activities, and
Action their separation date. Negotiated the vendor rates saving the company 25% per contract
o Developed a process combining Adobe, and EPAD technology to eliminate the retention of hardcopy audit
documents resulting in a cost saving to the company
• Acted as interface between Auditing, and Data Security departments pertaining to the closure of noted auditing
findings
• Developed, and implementation an Emergency ID process whereby developments access to production was
limited to read only access. High access IDs were granted pending Senior management’s approval
• Executed, and completed the Oracle database remediation project to validate user-IDs (Schema, user, system
IDs) and the removal of excessive access
EDUCATION
Fordham University – 1974 – MBA – Management
CUNY – Staten Island – 1972 – BA - Economics
Alfred Federici