Senior Proposal & Program Management Executive

PAUL SULLIVAN, PMP, PMI-ACP, CSM, ITIL, CSSGB, CAP, CISSP, CSSBB, CQIA, Security+, CP APMP, CP APMP, CSQE

Top Secret (TS) with Sensitive Compartmented Information (SCI) Eligibility Clearance

SENIOR PROGRAM MANAGER

PROFESSIONAL SUMMARY

112 Hamilton Road, Potomac Falls, Virginia 20165

410-***-**** (Cell)

**********@*******.***

Mr. Sullivan is a highly qualified project management executive who has managed advanced development, full-scale development, and production programs and is leading large organizations responsible for designing, developing, installing, testing, provisioning, commissioning, operating, and maintaining complex, software-intensive information management and telecommunications systems. He has also managed large nationwide Indefinite Delivery and Indefinite Quantity (IDIQ) service contracts, providing management and technical support personnel, including managing global and national virtual teams. Mr. Sullivan delivers projects on time and within budget. He has the talent for proactively identifying and resolving problems and mitigating risks – reversing unfavorable schedule variance, controlling costs, automating processes, maximizing profits, and delivering complex global and nationwide systems. Mr. Sullivan has extensive knowledge of federal security regulations, standards, industry’s best practices, and templates required to complete his various security roles. These include: Office of Management and Budget (OMB) Circular A-130, Federal Information Security Management Act (FISMA), National Institute of Standards and Technology (NIST) Risk Management Framework, Federal Information Processing Standards (FIPS), FedRAMP documents and templates, Federal Data Center Consolidation Initiative (FDCCI), NIST-800 series, SANS Twenty Critical Security Controls for Effective Cyber Defense, Defense Information Systems Agency Security Technical Implementation Guides (STIGs), United States Government Configuration Baseline (USGCB), Health Insurance Portability and Accountability Act (HIPAA)/Health Information Technology for Economic and Clinical Health (HITECH), Payment Card Industry Data Security Standard (PCI-DSS), Sarbanes-Oxley Act (SOX), Regulatory Guide 5.71, Cyber Security Programs for Nuclear Facilities and Intelligence Community Directive (ICD) Number 503. Mr. Sullivan has the Project Management Professional (PMP), Project Management Institute (PMI)-Agile Certified Practitioner (PMI-ACP), Certified Information Systems Security Professional (CISSP), Certified Authorization Professional (CAP), Certified Software Quality Engineer (CSQE), and Security+ certifications. He plans to take the certification exams for the Certified Cloud Security Professional (CCSP) and Health Care Information Security and Privacy Practitioner (HCISPP) in 2024/2025. He has extensive security training, including ISC2 CISSP and CCSP certifications. He has supported companies in obtaining Capability Maturity Model Integration (CMMI) Level 3 Development and Services, ISO 9001:2015 Quality Management System (QMS), ISO 20000-1:2011 Information Technology Service Management, and ISO 27001:2013 Information Security Management corporate certifications. He performed process engineering and improvement, conducted internal process audits, and supported the independent external ISO certification audits.

REPRESENTATIVE SOFTWARE TOOLS EXPERIENCE

Document Preparation

Microsoft Office, Microsoft Visio, Photoshop, Microsoft Access, Adobe Creative Suite, Snagit, Paint, Adobe Acrobat Pro, Nuance PDF Converter, RoboHelp, SharePoint, OmniGraffle, and VisibleThread Docs

Other Tools

Rational Method Composer, Rational ClearCase, Rational Method Composer, Rational DOORS, Microsoft SharePoint, Cyber Security Assessment and Management (CSAM), JIRA, Xacta, Salesforce, ServiceNow, Microsoft Project, User Experience (UX), Smartsheet

EMPLOYMENT SUMMARY

Point West Innovation Group

Security Solution Architect/Security Program Manager/Business Development

2017-Present

Mr. Sullivan is performing multiple roles for multiple clients. Major Life Science Client. Developed complete Health Insurance Portability and Accountability Act (HIPAA) compliance policies and procedures for a global life science organization. Major Telecommunications Company Client. He supports a major telecommunications company as a Security Solution Architect/Security Service Delivery Manager. As a Security Solution Architect, he develops technical managed security solutions and security consulting solutions, including internal and external network vulnerability assessments; NIST, PCI, SOX, and HIPAA security compliance readiness assessments; security monitoring and intrusion detection services; threat intelligence and vulnerability management; security infrastructure and incident response. He architected the security posture solution for the American Society for Quality (ASQ), which is the same organization that awarded Mr. Sullivan his Certified Six Sigma Green Belt (CSSGB), Certified Six Sigma Black Belt (CSSBB), and Certified Quality Improvement Associate (CQIA) certifications. Mr. Sullivan manages cybersecurity projects for the Global ITS Security Consulting Practice. He performed planning, scheduling, risk management, communications, budgeting, cost and schedule control, personnel management, and reporting for each project. Mr. Sullivan prepares monthly customer status reports and provides status presentations to the customer and the company’s senior leadership, including multiple Mid and Small Business Clients. Mr. Sullivan performs business development roles for these clients, including strategic business planning, market account development, and opportunity identification, qualification, and capture. He is leading the capture of a $1B ten-year government opportunity and managing the proposal effort. Mr. Sullivan prepared winning proposals for the Chief Information Officer–Solutions and Partners 3 (CIO-SP3) and Centers for Medicare and Medicaid Services Strategic Partners Acquisition Readiness Contract (CMS-SPARC). He also performs proposal development and management. One of his clients recently received a five-year, $50M contract from the Corps of Engineers to support a Financial Management System, a Project Management Information System, and an Enterprise Data Warehouse (EDW). He also led a proposal effort that resulted in the award of a five-year Department of Education Blanket Purchase Agreement (BPA) for Program Management and Independent Verification and Validation (IV&V). He just played a leading role with one of his clients in obtaining CMMI Level 3 Services, ISO 9001:2015 Quality Management System (QMS) – Requirements, ISO 20000-1:2011 Information Technology Service Management, and ISO 27001:2013 Information Security Management corporate certifications. He performed process engineering and improvement, conducted internal process audits, and supported the independent external CMMI and ISO certification audits.

Lynx Technology Partners

IT Security Program Manager/Senior Director

2014-2017

Mr. Sullivan was responsible for expanding the company's Federal market presence, including establishing the Federal Strategic Business Plan and Federal Marketing Plan, identifying new opportunities, executing marketing initiatives, and leading Federal proposal efforts. Mr. Sullivan also managed IT security, network engineering, and penetration testing teams to conduct security assessments, vulnerability management, and social engineering testing across all USDA organizations. He performed project initiation, planning, execution, monitoring and control, and closeout. Mr. Sullivan’s team completed fifteen security assessments of USDA organizations and forty-five penetration tests. Mr. Sullivan implemented agile project management techniques to support personnel working in various locations. He prepared weekly and monthly customer reports and presented them to significant stakeholders, including the USDA Chief Information Officer (CIO) and Chief Information Security Officer (CISO). Mr. Sullivan used his IT security expertise to complete major elements of the security assessments. He also supported the development of internal and external penetration and social engineering test plans and reports. He also performed security assessments for nuclear plants using the latest NEI 13-10 and Regulatory Guide (RG) 5.71 security standards. Mr. Sullivan’s team completed all program milestones ahead of the customer schedule.

Tanager

Program Manager/Business Development

2013-2014

Mr. Sullivan manages Federal IC and DoD programs. He performed program planning, scheduling, risk management, communications, budgeting costs, schedule control, personnel management, and reporting for each program. Mr. Sullivan prepared monthly customer status reports and provided status presentations to the customer and the company’s senior leadership. Mr. Sullivan is a member of the Business Development organization responsible for seeking new IC and DoD opportunities, conducting opportunity analysis, preparing Requests for Information (RFI), and preparing proposal responses for programs up to $75M.

Praxis Engineering

Senior Subject Matter Expert/Task Manager

2012-2013

Mr. Sullivan managed and supported significant process improvement efforts to implement all CMMI Level 2 and 3 processes for a large Federal Intelligence Community (IC) organization, using Agile and Six Sigma methodologies. He performed planning and management, supported process development, and validated project management, agile, business, engineering, acquisition, services, and support processes. Mr. Sullivan used his direct experience and training in emerging security technologies to develop detailed end-to-end security processes. Mr. Sullivan developed an extensive set of business processes to optimize the business operations of several critical Federal IC clients. Mr. Sullivan was responsible for task management, including planning, scheduling, budgeting, and reporting for the IC Office, IC Division, and IC Program Sustainment efforts. He was fully responsible and accountable for the work on the task and is the POC with the COR for managing this task. Mr. Sullivan prepared monthly customer reports and provided monthly status reviews. He also planned and led Technical Working Groups (TWGs) comprising twenty personnel.

Johns Hopkins University

Adjunct Professor

1993-1995

Mr. Sullivan prepared and delivered graduate courses for the Master of Science in Information/ Telecommunications Systems at the Carey School of Business. He taught 220 students.

Booz Allen Hamilton

Senior Associate/Senior Program Manager/ Technical Subject Matter Expert

1992-2012

Mr. Sullivan held consulting and program management roles, including senior management analyst, senior process engineer, senior system engineer, senior test engineer, senior program manager, and director of operations. The projects included large commercial, federal, and IC system programs for clients such as the National Aeronautics and Space Administration (NASA), the U.S. Treasury, the National Cancer Institute (NCI), and numerous IC organizations and contractors. For five years, Mr. Sullivan supported the National Cancer Institute (NCI) of the National Institutes of Health (NIH) in preparing system requirements, design, and operational material for the Cancer Therapy Evaluation Program CTEP) and Division of Acquired Immunodeficiency Syndrome (DAIDS). Mr. Sullivan Clinical Trials Monitoring Branch (CTMB) Audit Database (CTMB-ADB) requirements document, Common Toxicity Criteria (CTC) Form, Cancer Therapy Evaluation Program- Associate Registration (CTEP-AR) Quick Reference Guide, DARTS Associate Registration v1.6 Software Requirements Specification, Protocol Authorization and Tracking System (PATS) User Guide, Drug Authorization and Review Tracking System (DARTS) Investigator Registration User Guide, Common Toxicity Criteria (CTC) Interactive Toxicity Reporting System (CITRS) System Requirements Document and associated user guide help files using RoboHelp and DAERS AACTG Beta 1 Division of AIDS (DAIDS) Adverse Experience Reporting System User Guide. For the key DoD Healthcare organization, Mr. Sullivan prepared a comprehensive system user guide for the global healthcare system. He held an IC program management role, directing all deployment and operations activities for the global web portal system, with overall P&L responsibility and leadership of a 20-person workforce responsible for Certification and Accreditation (C&A), Integration Test and Evaluation (IT&E), and Operations and Maintenance (O&M). He is fully responsible and accountable for the work on the NASA and IC contracts he managed and was the single POC with the COR. Mr. Sullivan planned, led, and supported significant process improvement efforts that focused on implementing all CMMI Level 2 and 3 processes for a large Federal IC. He performed process development, process training, pilot project implementation, and validated project management, business, engineering, acquisition, services, and support processes. Mr. Sullivan was responsible for task management, including planning, scheduling, communication, budgeting, and reporting. Mr. Sullivan prepared monthly customer reports and provided status reviews for the customer. He led an Agile TWG of eight personnel, successfully implementing tailored IC agile processes. Mr. Sullivan performed all finances, business development, marketing, service delivery, human resources, and administrative affairs. Mr. Sullivan also performed a program management role for all IC management, technical, and operational processes and infrastructure, including managing a team of up to 25 personnel and developing and managing 15 process tasks. He served as an IC Program Manager, responsible for planning, executing, and monitoring seven TTOs and thirty-nine personnel. Mr. Sullivan served in a program management role for a $40M IC modeling simulation program, managing seven TTOs and 35 personnel, including 7 subcontractors and vendors. Mr. Sullivan planned and managed up to 50 staff across 6 TWGs for major IC contracts, ensuring the delivery of 105 customer deliverables. Mr. Sullivan also planned and executed two requirements management efforts for two major Federal IC organizations. He also managed large project management support contracts, including NASA’s Integrated Financial Management Program (IFMP), where he led 75 personnel, including subcontractors, across seven NASA Centers in the United States. Mr. Sullivan was a Deputy Program Manager for a $40M IC modeling and simulation program, overseeing multiple subcontractors and vendors. Mr. Sullivan planned and managed security tasks for high visibility and was responsible for completing information technology (IT) and operations security planning and risk assessment for a major multinational offshore combat system ship qualification trial (CSSQT). He used his extensive IT security expertise and direct security experience with emerging security technologies to perform a comprehensive risk assessment. Mr. Sullivan planned and managed the International Trade Data System (ITDS) program, overseeing 15 personnel across 5 TTOs. His program team developed management and technical work products to support key program milestones. For NASA's EBNet program, Mr. Sullivan led an Independent Verification and Validation (IV&V) team to provide an independent test and assessment of the global telecommunications system. He performed program planning, scheduling, risk management, communications, budgeting costs, schedule control, personnel management, and reporting for each program. Mr. Sullivan used the Deltek Open Plan to perform EVMS for three years on the Federal IC program. Mr. Sullivan also served as Senior Network Engineer for 8 years, handling requirements identification and analysis, network system design, and integration. Mr. Sullivan prepared monthly customer status reports and provided status presentations to NASA Headquarters' senior leadership. He received several major NASA awards for his program management role. Mr. Sullivan also reviewed and approved all contract deliverables. He won several major NASA awards for his program management role. Mr. Sullivan also reviewed and approved all management and technical deliverables. He performed key proposal management roles for contracts valued at $900M and was responsible for securing $ 1.6 B in revenue.

EDUCATION

Master of Science, Computer Science

Fairleigh Dickinson University – Teaneck, New Jersey

Master of Business Administration (MBA)

Fairleigh Dickinson University – Rutherford, New Jersey

Bachelor of Science, Engineering

United States Military Academy (USMA) – West Point, New York

SUBJECT MATTER EDUCATION AND CERTIFICATIONS

CERTIFICATION TRAINING

CERTIFICATION/DATE

CERT NUMBER

Project Management Professional (PMP®), RMC Project Management, Inc.

PMP®, 2004 – Present

182125

Certified Six Sigma Green Belt (CSSGB) Training, American Society of Quality (ASQ®)

CSSGB, December 2011 – Present

7130

CompTIA Security+ Certification Training SY0-301, Ultimate Knowledge Institute

Security+, May 18, 2012 – Present

COMP1001020420117

(ISC)2® Certified Authorization Professional (CAP®) Self Study

CAP®, August 7, 2102 – Present

432751

Information Technology Infrastructure Library (ITIL®) (2011) Foundation

ITIL Foundation (2011), September 7, 2012 – Present

100430279

(ISC)2® Certified Information Systems Security Professional (CISSP®) Training, Securible, LLC; InfoSec Institute, (ISC)2® CISSP® On-line Training; and Pass4Sure (ISC)2® CISSP Exam Preparations

CISSP®, January 23, 2013 – Present

432751

Certified ScrumMaster® (CSM), CollabNet

CSM, June 10, 2013 – Present

00261149

Project Management Institute (PMI®)-Agile Certified Practitioner (PMI-ACP®) Online Exam Prep, cPrime

PMI-ACP, August 31, 2013 – Present

1659586

Certified Six Sigma Black Belt (CSSBB) Training, American Society for Quality (ASQ)

CSSBB, March 7, 2015 – Present

16227

Certified Quality Improvement Associate (CQIA) Quality Council of Indiana Course

CQIA, February 13, 2017 – Present

12475

Association of Proposal Management Professionals (APMP®)-Foundation Shipley Training

CF APMP, June 7, 2017 – Present

023*****-**-JSVE

Association of Proposal Management Professionals (APMP®)- Practitioner (CP-APMP) Tutorial

CP APMP, August 21, 2017 – Present

023*****-**-CRVE

Certified Software Quality Engineer (CSQE), Quality Council of Indiana

CSQE, October 19, 2018 – Present

6406

Software Engineering Institute, Intermediate Concepts of CMMI®

CMMI® Intermediate Concepts Certificate, November 2007

OTHER RELEVANT INFORMATION

CLEARANCE

MEMBERSHIP

Top Secret (TS) with Sensitive Compartmented Information (SCI) Eligibility Clearance, 2002 (Active)

Association of Proposal Management Professionals (APMP)

U.S. Treasury, 1997 (Not Active)

International Information Systems Security Certification Consortium, Inc. (ISC)

American Society for Quality (ASQ), Senior Member

Scrum Alliance

CompTIA

Cloud Security Alliance

Project Management Institute

Contact this candidate