Information Security Officer

Sr Manager, Quality and Security Management

Sr Manager, Quality and Security Management - T-Systems North America, Inc

New York, NY

Industrial Engineer / Six Sigma Black Belt with senior management experience in Business Process Reengineering, Quality and Information Security with a successful 15-year track record in the industry. Continuously looking for challenging leadership roles in organizations seeking breakthrough performance in IT operations.

Work Experience

Sr Manager, Quality and Security Management

T-Systems North America, Inc - New York, NY

January 2007 to Present

* Six-Sigma Black Belt: Senior program manager responsible for design and execution of corporate Six Sigma program. Use of DMAIC/Lean for data driven process improvement. Corporate training of Green Belts, and management sponsors.

* Country Security Officer: responsible for InfoSec framework including security policy, IT/NT requirements, and operational instructions under direction of CIO. IS Risk Management, including assessment and mitigation. Responsible for the Emergency / Business Continuity Management program for staff, buildings, and internal IT.

* Quality Management: responsible for ISO 9001 (Quality), 20000-1 (Service), 27001 (Information Security), and 27017/18 (Security and Data Privacy in the Cloud) certifications. Internal and external audits. Project management to enable companywide continuous improvement.

* Financial Internal Control Systems (SOX): Responsible for ICS / S-OX framework, including design and review of corporate and transaction level controls for financial reporting. Yearly ICS assessments, reporting to local and global stakeholders.

Sr Consultant - Process Quality Management

Gedas USA, Inc - Detroit, MI

October 2005 to January 2007

* Process Quality Management: Responsible for managing ISO 9001 Quality ManagementSystem. Lead Auditor during ISO 9001 internal and surveillance audits. Project manager to drive and achieve the initial company ISO certification. Successfully managed more than 50 continual improvement sessions with department leaders to optimize business processes, develop quality metrics, and minimize quality related costs. Use of QM techniques to identify root causes, implement and communicate corrective actions.

* Project Management: Responsible for providing oversight and support to the Vice President of Quality and Project Management regarding project status, trend analysis and risk mitigation. Responsible for performing project management Quality Gates to assess adherence to stated requirements. Coach PMs on best practices. Track and analyze results from project-based customer surveys and lessons learned. Responsible for project reporting to headquarters in Germany. Responsible for maintaining and managing project management tools, such as traffic light reports and time reporting.

Junior Project Manager - IT Operations

Gedas Argentina S.A - Buenos Aires, AR

October 2003 to October 2005

* IT Project Management: Supported project management function for IT. Oversight of project budgets, timelines, and deliverables. Responsible for monthly project invoicing to customers, and internal management reporting.

* Assistant to Procurement Managers: Supported daily operations, including issuing supplier RFPs, approvals, and creation of purchase orders in SAP.

* Assistant to Vice President - IT Operations: Supported management to prepare local, and international presentations, including project proposals, and business cases. Facilitated yearly department budgeting process.

Senior Technician - Telecommunications

Representaciones en Telecomunicaciones. S.A - Buenos Aires, AR

February 1997 to May 2001

* Level 3 technical resource for the repair of digital/analog cell phones. Regular interaction with customer support to provide cost/time estimates to end-users.

* Responsible for internal technical staff training.

* Temporarily in charge of branch offices.

Education

MBA

Baruch College, Zicklin School of Business New York, NY

February 2017 to May 2020

BS/MS in Industrial Engineering

Universidad Tecnologica Nacional Buenos Aires, AR

February 1998 to March 2004

High school or equivalent in Electronics

Colegio Salesiano Pio IX Buenos Aires, AR

January 1991 to December 1996

Certifications

ISO 22301 Lead Auditor Business Continuity

ISO 27001 Lead Auditor Information Security

ISO/IEC 20000-1 Lead Auditor

Certified Six Sigma Black Belt

Certificate in Sarbanes Oxley (CSOX)

ITIL Foundations Expert

ISO 9001 Lead Auditor Quality Management

Information Systems Security Officer

Information Systems Security Officer - Zermount

Washington, DC

Secret Security Clearance (Department of State, Department of Defense), Public Trust (Department of Commerce)

Authorized to work in United States for any employer

Work Experience

Information Systems Security Officer

Zermount

May 2018 to Present

• Lead security evaluations, A&A, and present findings to Authorizing Official for eight assigned systems

• Create, track, and close Plan of Action & Milestones (POA&M), reduced POA&Ms by 50% within month of assignment

• Achieve Authority to Operate (ATO) status on 100% of systems assigned

• Document continuous monitoring plan, implementation statements, security policies and procedures

• Promote awareness of information security issues among agency staff and ensure they understand and adhere to systems security policies and procedures

• Develop and test information system contingency plans and disaster recovery procedures

• Conduct weekly system audit log reviews

• Implement and maintain system compliance with RMF, NIST 800-53 Rev.4, NIST 800-37 Rev.2, special publications and agency IT Security Directive

Defense - Configuration Management Specialist

SeKON

October 2017 to May 2018

• Managed configuration management (CM) intake and software distribution to DoD DISA for deployment

• Delivered technical CM training for IBM Rational Team Concert (RTC), AMRDEC Safe Access File Exchange (SAFE), and Virtual Collaboration Site (VCS)

• Led Change Control Board (CCB) and change request activities with executive-level stakeholders

• Maintained CM repository of program documentation, source code and artifacts

• Tracked and monitored configuration items to ensure compliance with standard operating procedure

• Reviewed and updated POA&M mitigation documentation using the NIST Risk ManagementFramework

Senior Consultant

MIL Corp

March 2016 to October 2017

U.S State Department - Configuration Management Specialist

• Managed and tracked changes to ten Consular Affairs software applications baseline - change requests, code and documentation ensuring compliance with State department SDLC gate requirements

• Conducted quality audits of code repositories and project activities in the software tracking system (ClearQuest, and ClearCase)

• Submitted upgrades and patching deployment packages for major and minor applications

• Maintained documentation and conducted training for Consular Affairs CM processes and ensured adherence by the project team

Department of Homeland Security - Independent Verification & Validation IV&V Analyst

• Evaluated project deliverables, artifacts, and project management processes to verify solutions were implemented according to industry best practices, compliance frameworks and directives from sources such as NIST, GAO, GSA, CMMI, and PMI

• Supported integrated project teams by providing agency templates and subject matter guidance for project initiatives

• Presented IV&V findings and project improvement recommendations to senior management

Senior Business Process Analyst

Internal Revenue Service

August 2015 to February 2016

• Led system requirements gathering and refinement sessions with business stakeholders and technical team for the e-Authentication portal using frameworks NIST SP 800-63-2 and NIST SP 800-53 Rev4)

• Captured meeting minutes at requirements, program management and weekly status meetings

• Created SDLC Documentation and conducted system testing

• Modified system user accounts using LDAP

Product Owner/Business Analyst

Hewlett Packard

March 2015 to August 2015

• Led system requirements gathering and refinement sessions with business stakeholders and technical team

• Captured user stories within the agile-methodology VersionOne tool

• Created SDLC documentation, test scripts, conducted testing and coordinated UAT

• Supported deployment and help desk teams

Account Executive

Canon

June 2014 to March 2015

• Provided software-based solutions and security-enabled hardware to clients within assigned region

• Identified client business needs in order to improve security, document management and user workflow

• Created proposals, presentations, conducted hardware and software demonstrations with end-user training

• Tracked account and monitored accounts using Salesforce to ensure client-satisfaction

Quality Analyst

NT Concepts

October 2013 to March 2014

• Conducted Capability Maturity Model (CMMI) project audits and training

• Conducted testing, maintained defect log and documented system enhancement plans

• Created business process improvement templates and documentation to improve organizational efficiency

• Maintained team SharePoint repository with task statuses, documentation and project schedules

Operations/Trade Show Analyst

Graphic Arts Show Company

June 2013 to September 2013

Contract)

• Managed attendee and exhibitor back and front-end event registration for PRINT 13 national convention

• Troubleshot registration issues and system defects arising from events management software

• Led strategic communication efforts for GASC, exhibitors and clients using social media platforms

Consultant

CGI Federal

August 2011 to June 2013

Centers for Medicare and Medicaid Services (CMS) -HIOS Project - Business/Requirements Analyst

• Conducted requirements gathering sessions and led system demonstrations to the client

• Created SDLC documentation, user stories, mockups, test scripts, conducted system testing and coordinated UAT

• Managed and updated the requirements repository in SharePoint and Software Planner

• Defined user roles permissions, documented in Visio and assigned roles using administrator tool

• Maintained team SharePoint space with project updates, charge codes, documentation and schedules

Senior Supply Chain Management Consultant

IBM - Washington, DC

January 2009 to August 2011

US Census Bureau -Project Analyst in the Program Management Office (PMO) on Data Access and Dissemination Systems (DADS)

• Coordinated with resource managers to fill open requisitions, managed onboarding/off-boarding activities, initiated personnel security clearances and conducted new hire training

• Conducted quality checks prior to official deliverable submission to client

• Maintained configuration management records for assets, vendor/contractor items and software licenses

• Updated integrated master schedule (IMS) with latest status

Healthcare Integrated General Ledger Accounting System (HIGLAS) -QualityAssurance/Quality Control Consultant in the Program Management Office (PMO)

• Created and updated process and procedure documents, conducted CMMI quality training sessions

• Generated reports using the IMS to reflect earned value management metrics and task updates

• Prepared meeting agendas, facilitated, and captured minutes at internal and client meetings

IBM Fire Department New York (FDNY) Project - Business Analyst/Tester

• Participated in requirements gathering and review sessions with the client

• Documented user stories, test cases, tracked defects and submitted deliverables to the client

Education

Master's in International Commerce and Policy

George Mason University Arlington, VA

August 2007 to January 2009

Bachelor of Arts degree in Latin American Studies

The University of North Carolina at Chapel Hill Chapel Hill, NC

August 2002 to May 2006

Defense Acquisition University

Skills

CLEARCASE (Less than 1 year), CLEARQUEST (Less than 1 year), RATIONAL (Less than 1 year), SHAREPOINT (Less than 1 year), RSA (Less than 1 year), Cissp (Less than 1 year), Information Security (Less than 1 year), Information Technology (Less than 1 year), Configuration Management (Less than 1 year), Change Management (Less than 1 year), Agile (Less than 1 year), Waterfall (Less than 1 year)

Links

https://www.linkedin.com/in/juliana-berde-cissp-580b9517/

Certifications

Certified Information Systems Security Professional (CISSP)

ID#627463

Additional Information

Secret Clearance, (Department of State, Department of Defense), Public Trust (Department of Commerce)

Methodologies and Standards: PMI/PMBOK SDLC & PMO lifecycle; Waterfall; Macroscope P+; SEI/CMMI,

KPAs, AS9100B, DO178B, ISO9001; RUP; Agile/Scrum; Lean; Value stream mapping (VSM); Six Sigma-Green

Belt SKILLS HIGHLIGHTS

• Certified Lead Appraiser • Certified CMMI Institute • ISO13485 /ISO14971/ AS9100

CMMI-DEV V1.3 & V2.0 MDDAP Appraisal Team

Member (ATM) • 21 CFR Part 820 (CGMPs)

• Certified Lead Appraiser

CMMI-SVC V1.3 & V2.0 • Certified Lead Auditor • Medical Devices Standards

ISO9001:2015

• Certified B/C Team Leader • Quality Management, Auditing

CMMI-DEV & SVC V1.3 • Certified FISMA Compliance & Compliance

Practitioner (CFCP)

• Certified CMMI Professional • ASQ International Team

• Senior Member American Excellence Award Judge

• Certified CMMI Associate Society for Quality (ASQ)

• Process Consultant & ATM

• Certified Quality Manager

Contact this candidate