Information Technology and Security Management
Resume:
Jose Juan Marti
acql22@r.postjobfree.com
Shrewsbury, MA 01545
Experience
Bella Group
Vice President and CIO
Directed all technology initiatives for the corporation.
Managed all aspects of IT strategy and designed the technology roadmap for all Bella Group’s needs.
Directed the research of solutions for IT and business improvement, aligned with the technology roadmap.
Worked directly in the analysis and implementation of new projects, technologies, resources, and capital and operational budgets. Identified opportunities for cost reduction while aligning IT with business objectives.
Managed vendor relationships and negotiations for procurement, consulting and services.
Implemented IT governance best practices and a service oriented operating model for IT following ITIL.
2012 to 2014
Medical Card System
Vice President, IT Solutions Delivery, Strategic Initiatives
Directed the IT Department including the Development, Infrastructure, Operations and Service Desk Units
Managed the IT Architect and designed the IT roadmap for Medical Card Systems information technology.
Directed the research of solutions for IT and business improvement aligned with the IT roadmap.
Worked directly in the analysis and implementation of new projects, technologies, resources, and capital and operational budgets. Identified opportunities for cost reduction while aligning IT with business objectives.
Managed the IT QA and IT Compliance Units to ensure quality of services and compliance with federal and local laws, rules and regulations including HIPAA, HITECH, CMS and OIC.
Directed a team that consisted of an AVP, a director, several managers, systems analysts, software developers, database administrators, technology specialists, telecommunications engineers, and service desk operators.
Managed vendor relationships and negotiations for procurement, consulting and services.
Implemented IT governance best practices and a service oriented operating model for IT following ITIL.
2011 to 2012
Cardinal Health
Director, Information Technology Management
Directed the IT Department and designed the IT strategy for Cardinal Health’s Puerto Rico operations.
Analyzed IT capital and operational budgets. Identified opportunities and implemented cost reduction strategies.
Researched new solutions for business improvement and implemented those that aligned with business objectives.
Developed business case justifications and cost benefit analysis for IT projects.
Managed application and infrastructure security.
Directed a team of IS managers, systems analysts, software developers, database administrators, technology specialists, telecommunications engineers, and service desk operators.
Directed the implementation of a service oriented operating model for the department (ITIL).
Managed supplier relationships and negotiations for acquisitions, consulting and services.
2007 to 2011
Pfizer – formerly Wyeth
Lead, Business Technology Infrastructure
Accountable for the strategic integration of IT and the Business by making IT a tool to achieve business objectives.
Ensured alignment between systems architecture and business needs.
Research and implement new technologies and solutions to improve business outcomes.
Directed the Service Strategy, Service Design, Service Transition, Service Operation and Continuous Service Improvement functions including the End-User Support Service Desk (Help Desk).
Accountable for the IS project portfolio including timely delivery of all projects, business case development, risk analysis, business impact analysis, cost benefit analysis and all strategic decisions.
Responsible for financial and supplier management, including budget and vendor relationships.
Accountable for availability, demand and capacity management, and IS security management.
Accountable for performing control self-assessments and internal audits for all IS controls.
Developed and implemented policies and procedures for the IS procurement, security, business continuity / disaster recovery, service level standards, and service/operational level agreements of the IS department.
Accountable for the enforcement of all IT policies and regulatory requirements (FDA, SOX, HIPAA).
Decision maker on the purchasing of IT equipment and outsourced services.
Developed and maintained metrics to improve IT services. Made and implemented recommendations for improvement based on reported metrics in the balanced scorecard.
Directed a team of project managers, operations support specialists, telecommunications specialists, security analysts, data center operators and service desk operators. Accountable for staff retention, recruitment, professional development, evaluations and discipline.
2006 to 2007
University of Puerto Rico
Director, Information Technology Projects
Developed the IT Projects Management Office and designed the strategy for the University’s complex IT architecture.
Analyzed IT capital and operational budgets. Identified opportunities for savings and implemented cost reduction strategies throughout the department.
Researched new solutions for business improvement and implemented those that aligned with business objectives.
Developed business case justifications and cost benefit analyses for IT projects.
Managed the application development security for all internal development.
Directed a team of IS managers, project managers, systems analysts, software developers, database administrators, technology specialists, telecommunications engineers, security analysts, and service desk operators. Accountable for staff retention, recruitment, professional development, evaluations and discipline.
Managed supplier relationships and negotiations for consulting and services. Final decision maker on service level agreements with vendors.
1999 to 2006
Schering-Plough
Manager, Data Center Operations
Managed IT Operations and all related projects, including data center operations, installations, integration, implementations, patching, troubleshooting, upgrades, and support of hardware, operating systems and databases.
Performed strategic analysis, design and management for the data center and network operations.
Accountable for maintaining 24/7 systems availability.
Managed supplier relationships and negotiations for consulting and services.
Developed and maintained policies and procedures for systems management and operations.
Developed business case justifications and cost benefit analysis for IT projects.
Maintained alignment between systems architecture and business needs.
Implemented antivirus and systems security solutions; created and managed the IT Security Incident Response Team.
Accountable for staff retention, recruitment, professional development, evaluations and discipline.
1997 to 1999
Advanced Computer Technology, Inc.
Information Systems Consultant
Consulting for operating systems management, specializing in servers including installation, integration, implementation, troubleshooting and support for networked systems.
Server and network strategic analysis and design for implementation of solutions and services.
Software development, integration, implementation, testing, auditing, data conversions and support, specializing in Oracle and MS SQL Server databases.
Training for users and system administrators, including conferences and comprehensive exercises.
Pre-sales and marketing support, including software and services presentations to potential customers.
Technical support for DataStream MP2 Computerized Maintenance Management System (CMMS).
Performed post implementation audits to ensure alignment with customers’ business requirements.
1995 to 1997
Juan J. Rigau & Associates, Inc.
Director, Technical Support and Quality Functional Deployment Divisions
Managed a team of technical support personnel.
Performed software and hardware integration, systems analysis, development and documentation.
Managed relationship between software developers and customers.
Identified new functionality and business solutions to improve the software products.
Performed post implementation audits to ensure alignment with business requirements. J. Martí Page 3 of 4
Academics
2011 – 2013
EDP University
Professor of Information Security and Forensics – Graduate School
2000 – 2007 University of the Sacred Heart
Master of Business Administration (MBA) specialized in Information Systems Management (MIS).
1990 – 1995 University of the Sacred Heart
Bachelor of Science (BS) specialized in Biology, Chemistry and Computer Science.
1988 – 1990 US Army Academy of Health Sciences
Combat Medical Specialist, First Honor Graduate (Distinguished), Honorable Discharge.
1985 – 1988 University of Puerto Rico
3 years chemical engineering.
Professional Certifications
Certified Information Systems Security Professional – CISSP (ISC)2
Certified Information Systems Auditor – CISA (ISACA)
Certified Information Security Manager – CISM (ISACA)
Certified in Risk and Information Systems Control – CRISC (ISACA)
Certified Ethical Hacker – CEH (EC-Council)
Certified Internal Controls Auditor – CICA (IIC)
Certified Datacenter Operations Manager – CDOM (ICOR)
ITIL Foundations v3 Certified - ITILf (EXIN)
QualysGuard Certified Specialist – QGCS (Qualys)
CompTIA STRATA GreenIT
Other Engagements
Guest speaker at the Information Systems Audit and Control Association (ISACA): o Cloud Computing: A Control and Risk Mitigation Approach o Virtualization
o Information Systems Operations, Maintenance and Support Review o Information Systems Acquisition, Development and Implementation Review o Protection of Information Assets Review
o Data Center Controls: A Review
o Information Systems Control Design and Implementation o Auditing Social Media
o BYOD: Bring Your Own Device
Guest speaker at the Information Systems Security Association (ISSA): o Cloud Computing: What Every Security Professional Should Know o IT Operations Security Review
o Software Development Security Review
o Security Architecture and Design
o Data Center Security: An Overview
o Governance and Risk for Social Media
o Securing the End-User
o Security Architecture and Design
o Software Development Security Review
Completed Projects
Sponsored and directed the team that migrated a local Microsoft Exchange (email) environment to Office 365 (Microsoft’s cloud offering) reducing the administrative and technical overhead and improving long-term costs.
Directed the team that migrated all non-manufacturing related servers to a cloud services provider reducing the footprint by 50% while improving systems availability and information security.
Implemented a service oriented model (ITIL) on an unstructured IT department to improve services and reduce budget. Savings of $100,000 a year achieved. Service levels improved by 85% overall.
Created a virtual IS Infrastructure and Operations team to centrally support all Puerto Rico sites for a large pharmaceutical manufacturing company. Savings of $350,000 a year achieved.
Directed the team that implemented an EMC Symmetrix DMX-4 SAN, and migrated all business data from local storage and a legacy EMC CLARiiON into the DMX-4.
Directed the team that implemented wireless LAN at manufacturing and packaging areas of several large pharmaceutical manufacturing plants and warehouses.
Directed the team that refreshed the network infrastructure (LAN and WAN) and designed, developed and deployed a Metro Ethernet and Multi-Protocol Label Switching (MPLS) WAN to improve intra island data and voice communications for 6 Puerto Rico sites including several large pharmaceutical manufacturing plants, a distribution center and a sales office. Savings of $300,000 a year achieved.
Designed a redundant fiber circuit and managed the installation for disaster recovery and business continuity purposes.
Data Center relocation of 150 servers, 72 fiber links, 4 switches and an EMC SAN from a 500 sq. ft. computer room to a state of the art 2500 sq. ft. data center. Savings of $45,000 a year achieved.
Directed the implementation of Oracle e-Business Suite through 11 campuses and the central administration office at the University of Puerto Rico.
Managed the migration of 65 servers and 1500 workstations from NT4.0 domains to Active Directory.
Managed the server consolidation project including changing servers to blade format, consolidating storage and reducing costs while upgrading the hardware at Schering-Plough, this project saved the company about $500,000.
Managed the Installation/Operational Qualification (IQ/OQ) of 60 Windows NT, 2000 and 2003 servers.
Managed the Data Center expansion from a small room to a raised floor, environmentally and access controlled facility, including a change from Halon to FM200 fire suppression system and the commissioning process.
Managed the reconfiguration of the local area network (LAN) and wide area network (WAN) to upgrade from 10baseT to 100baseTX and change from Cabletron hubs to Cisco switches and routers. This project consisted of changing the equipment, laying of new fiber optic lines, coordination and management of contractors and employees and the qualification / validation of the equipment and the communications (LAN and WAN).
Managed the validation of the MP2 CMMS and ISOtrain Training Tracking System.
Implementation of Microsoft Exchange, including installation, configuration of Outlook clients and servers, creating the mailboxes and migrating the post office from Lotus cc:Mail for more than 1500 users.
Installation, configuration, performance tuning and connectivity testing of Oracle 8i Enterprise Server, for Kronos Timekeeper and Workforce applications.
Implementation of a complete antivirus software solution using McAfee and ePolicy Orchestrator Enterprise software and on more than 1000 workstations. Successfully prevented several major virus attacks.
Development and implementation of a complex Intranet with a portal for user.
Development and implementation of a production line efficiency reporting system.
Installation, configuration, performance tuning and connectivity testing of Oracle 8i Enterprise Server, for MP2 conversion at several sites including Schering-Plough Products, LLC Manatí and Las Piedras Operations.
Installation, configuration, performance tuning and connectivity testing of MS SQL Server, including conversion and mapping of a database from MS Access into SQL Server at Puerto Rico’s Tourism Company.
Several implementations of MP2 CMMS. These projects included the installation and configuration of Windows NT Server 4.0, installation of Microsoft SQL Server or Oracle Server on the database server, installation of the software on the application servers and the workstations, testing and optimization of all components for maximum performance and user training in sites such as Schering-Plough Products, LLC Manatí and Las Piedras Operations, Sistema Universitario Ana G. Méndez, Colegio Universitario del Este, Baxter Healthcare Fenwal Division San Germán, IT Section 56th Signal Battalion, US Army, Fort Buchanan and Autoridad de Edificios Públicos.
Implementation of a Windows network including installation of hardware (server and workstations), operating systems, software and training of users in several sites including Doral Financial Corporation’s Central Filing Offices.
Audits of MP2 Computerized Maintenance Management System at several customer sites.
Several implementations of Argos2000 CMMS, including integration with existing hardware and software at various locations including 7up/RC Bottling Co., Dupont Pharmaceuticals, Baxter Healthcare, San Juan Gas, Puerto Rico Courts Administration, Mayagüez County Public Works Department, University of Puerto Rico and others.
Contact this candidate