¬SUMMARY
Mr. Lauro is an Enterprise Level Sr. Technical Manager/Advisor. Expertise includes increasing profitability through efficiency, cost containment and risk reduction; customer satisfaction; clear and concise executive reporting; creating roadmaps for implementing new technologies and training.
• Technical Management/Business Liaison
• Framework Implementation/Design
• Change Management
• Disaster Recovery
• Service Level Agreement design/implementation
• Performance Analytics
• Regulatory Compliance
• Security
• Data Management
• Protocol process creation
• Enterprise tuning
• Documentation/Project Plans/Roadmaps
• Efficiency improvement models (CMM, Scorecard, etc.)
• Reporting
SKILL HIGHLIGHTS
Databases: MS SQL 6.0 – 2008 R2, Oracle, DB2, various other databases
OS: MS Windows 2.0-7.0, 3.51, Windows 2000-2008 R2, Linux, VMS, AIX, Solaris
Applications Highlights: MS Office Suite (Visio and Project Manager), Tripwire, Montran, App. Detective, Point Secure, Power Keeper, App. Radar, Back Track 4.0 tools etc.
Development environments: MS SQL Visual Studio 2008 – 2010, SQL Enterprise Manager, Oracle Enterprise Manager, Java Framework. IIS, Web Sphere.
Desktop: Windows 2.0 – Win 7, Linux
Routers and Appliances: Iron Mail, Cisco Routers and PIX (including clones), Switches, VPN Services, Wireless Services, RSA, Checkpoint Security appliances
Storage: NAS, SAN, EMC Optics, HDD, Virtualization
Disaster/Backup Recovery: Tivoli, VERITAS
Problem/Incident Management – Desktop to Enterprise Applications and Databases
Cloud Integration: Azure, Google, Cisco (Social Network presence is a relatively new field)
Regulatory Compliance – all critical regulatory mandates including SOX, HIPPA, PCI and International standards as they apply.
Reporting – Management, Operational, User and Regulatory
Test bed development and honeypot creation.
Documentation: Roadmaps, Baselines, SLAs, SOPs, Processes, FAQ generation, Policy
\
EXPERIENCE
January 2010 – Present
Employer – Confidential
Manage and Design Security Information Management System (SIM) to: automate regulatory reporting, monitor system status, track compensating controls and monitor the honey pot architecture.
• Heterogeneous environment consisting of MS SQL, Oracle and DB2 servers
• Mainframe, MS and Linux operating systems
• Blade application control software
Tasks included creating reporting modules; meeting management expectations while acting in the capacity of Program Manager and acting as a liaison between government and third party auditing agencies. System was required to support Large Client Reporting services. Service Level Agreements were created and used to clearly define the relationship and expectations. The system had an integrated incident/problem reporting service.
Prior to project initiation, roadmaps were created, baseline process established and approved for implementation.
January 2008 – January 2010
During January 2008 pursued a Ph. D. in IT. Wrote and submitted a government grant for designing a data system for secure consolidation of health care information for analytic use. Design featured an incident management system for user problem tracking and resolution (users being large organizations).
November 2007 – January 2008 (2 month contract)
Supervised and designed migration of IIS/MSSQL cluster for Transportation auditing facility from Florida to Michigan (MS SQL 2000 to MS SQL 2005, IIS and supporting applications).
• Centralize data systems for implementation of enterprise backup and recovery upgrades.
• Centralize enterprise-wide security during migration.
• Automated technical auditing.
October 2006 – April 2007
Production Database Security Administrator
BNP Paribas, North America, NY
Implemented and designed security framework, policies and baselines for North American Production Database Enterprise.
• Chaired Database Security Working Group
• Designed and Documented
o North American Database Policy and Baselines (Oracle, MS SQL, Sybase and VMS-based systems)
o Database Security Division Standard Operating Procedures
o Compensating Control Guidelines
o Risk Acceptance Statements
o Patch Management Guidelines and SLA
o Database Monitoring Framework
o Escalation & Containment guidelines
• Created Self-Assessment Framework
• Project planning and resource leveling
• Define multiple task definitions
• Provide detailed reports on project status to Sr. and C-level executives
• Coordinate multiple teams
• SME for all database issues
• Release Management and user testing cycles
• Checkpoint Security appliance and Cisco VPN configuration
January 2006 to October 2006
Diverse Projects
Non-Profit business services, website design, evaluation MS SQL 2005 (64bit)
October 2005 – January 2006
Reengineer Dealer Management System (DMS) for major DMS supplier from Legacy to Windows 2000 while acting in the capacity as a Technical Management Consultant.
March 2005 – October 2005
Pittsburgh National Corporation (PNC) Sr. Audit Manager
• Created risk reduction process by implementing standardized assessments, formal policies and procedures
• Sat on Security Review Board for infrastructure and web-based security
• Designed security self-assessments for 20+ business units
• Implemented audit framework for UNIX, one-off systems and all databases
• Created presentations for C-Level reports
• Designed ETL strategy for extraction of information from Lotus Notes
• Created CoBit-based implementation strategy
• Designed meta-base for collection and analysis of security information
• Direct all team activities in areas of Change Management
• Assure all SLDC policies are enforced
• Provide detailed reports on project status to Sr. and C-level executives
• Design QA for testing enterprise architectures for security and operational efficiency
2001 - 2004
Mellon Financial Corporation (Finance) Sr. Management/Systems Consultant
• Evaluate enterprise technical infrastructure applications/databases
• Create working teams between business (sometimes competing) units for technical re-engineering at direction of Executive Management
• Lead Negotiator between Technical and Business Departments
• Finance Department Representative on the Technical Review Board
• Designed/created a testing environment for complex applications and architectures
• Created and managed team developing Synergies database (cross-selling initiative)
• Juniper Security application configuration
o Introduced Cache (post-relational database) to Mellon
Tracked actual and potential cross-selling initiatives across 30 business units
Integrated data from DB2, Oracle, MS SQL, Excel, Access and numerous other data sources
Provided C-Level reporting and multi-level administration services
• Marketing Analytical Database (MAP) – R&D
o Constructed ETL platform using MS Visual Studio and DTS
o Managed development team constructing meta-database
• Security initiatives
o Managed the team implementing SOX solution for tracking documentation and responsibility chain
o Risk mitigation through consolidation of services and implementation of CMM (level 3) in SLDC processes
• Act in the capacity of SME for database and application development
• Release Management and user testing cycles
1994 - 2001
Sheraden Community Development Corporation (Formal Incorporation 1995)
Created and funded this business bringing advanced computing services to non-profits working in the public interests. Developed enterprise architectures for non-profits (LAN, WAN, Application and Database)
• National data warehouse initiative for food banks
• Consulted with St. Lewis for integration of “Moore Time Dollars” into formal city infrastructure
• Presented at local, regional, national and international forums on the role of technology in Public Health
• Managed creation of distributed, web-based inventory tracking system for physical warehouses
o Inventory
o Logistics
o CRM
o Accounting (integration of Solomon 6.0)
• Installed WAN with VPN to enhance 3 Rivers Youth communications
o Linked 10 group homes
• Automated form creation and delivery interfaced with health care providers
• Worked with a multitude of community-based groups, non-profit boards and Northern Telecom (European)
• Co-Founded largest Healthy Cities movement in the world (worked closely with Toronto 2000 initiative, Trevor Hancock, Founder)
• Collaborated closely with University of Pittsburgh’s Graduate School of Public Health
Social Mental Health Initiatives
• WAN-based communications initiatives linking community centers
• Created Block Watch Organization (PA Governor’s Award for effort)
o Worked closely with Pittsburgh Police to create data system for tracking neighborhood criminal activity
o Provided real-time input for community members and groups
• Created alternative educational delivery system for at-risk children for Community Outreach Incorporated (Phil Pappas, Director)
o Windows/Novell system to facilitate class room instruction
o Program expanded from 15 to over 50 in one month and came to include evening sessions for the parents
o Realized 90% of goals set by public school administration in 3 months
o Cost savings – approximately $1,000,000 over traditional approach
• Created Skill Cell Theory and Methodology (AI)
1991 – 1995
Financial Partners Incorporated Founder/Partner
• Executive retirement and estate planning
• New Agent of the Year 1991-1992 New York Life Insurance Company
• AIM Funds Summit Club
• Million Dollar Round Table Qualifier
1975 - 1981
US ARMY
10th Special Forces Group, 1st Special Forces (Airborne)
Honorable Discharge
EDUCATION
US Army Special Forces Communications, Medical and Counterinsurgency qualified
University of Pittsburgh B.S. Biology, Graduate School Biochemistry
ADDENDUM 1 - Case Studies
Problem:
Mellon’s Trust Asset Database (TAD-97 billion in assets) rectified 5 mainframe feeds and automated data formatting for regulatory reporting quarterly. Processing took 14 days if no errors occurred.
Administrative staff hours were excessive because of poor documentation, lack of interface and high ETL processing errors
Administration crossed 4 silos
Cost/Time replacement quoted by MIS Department
No single team in place for replacement initiative
Hi cost of fines when system failed (which was often)
Solution
Rebuild database using three dual processor Windows 2000 Servers running Oracle 9i (first introduction of Oracle 9i into a production environment at Mellon) and mirror database on Mid-Range platform
Coordinate mainframe, midrange and windows services
Create Q&A for acceptance testing
Align with corporate security policies
Create analytical interfaces using Access and Excel for financial analysts
Create web-based reporting for senior management
Created PERL scripts for AIX-based batch processing
Results
Reduced processing time to 3.5 hours and eliminated 99.6% of errors
Saved $700,000 over MIS quote
Saved $96,000/year in administrative costs
Saved $15,000/year analysts cost
Eliminated all late fines
Provided complete documentation
Brought system into compliance with all internal and external regulatory requirements
System passed through change management into production 6 months ahead of schedule
Problem
Clients were often involved with multiple business lines form Mellon. No coordination between business lines existed to maximize resources, reduce costs or take advantage of additional opportunities within the client’s environment. Each business line maintained its own client data without the benefit of standardization or normalization. New regulatory measures made the current environment an audit nightmare. Separation of duties (SOX) required elimination of redundant administration for each business line and a time-prohibitive and expensive undertaking under existing procedures.
Solution
Cache, a post relational, object-oriented multi-dimensional data/application system produced by Intersystems, Inc.
Create multiple, independent administration levels
Create multi-level, web-based application/reporting system
Object-oriented for maximum flexibility
Internal mapping of RDBMS systems in use by business lines for cross-checking data integrity during testing and changeover phase
Automated feeds to Access and Excel to provide interfaces for analysts
Multiple independent charting options
Results
Deployable on any Mellon production system
Normalized data while maintaining business-line administrative independence
Reduced administrative costs (back end) by 97 %
Allows adding objects at will thus creating a highly flexible environment
Web-based C-Level reporting modules
Provided analytic interface for BI
Reduced project time line by 12 months (initially 18 month project)
Met all regulatory requirements and included internal responsibility chain documentation
Allowed non-invasive embedding of internal and external data sources without sacrificing relational integrity of data source
Objectified RDBMS inclusions (databases, tables, columns)
Supported extremely rapid changes and passage through change control
Load balanced
Extremely scalable
Leveraged all existing resources
Cost 75% lower than Cold Fusion, ASP or JAVA constructions
Only client-side interface needed was web-browser
Addendum 2-Data Architect Engineer
2001-2004 Mellon Financial Corporation
Mellon introduces Balanced Score Card for Performance Management Services
1) Hyperion Based – Initial use of Sybase (integrated with application).
2) Designed Oracle 9i management performance BI solution
a. Integrated with HR PeopleSoft data through Star Schema design
b. Informatica used as ETL and auto documentation application
c. Integrated with DB2 financials
3) Designed DB2 Star Schema for advanced Business Intelligence applications
a. Worked with Microsoft using SQL 6.5 and MS data services to create ETL platform for importing data from a variety of sources (Oracle, DB2, MS SQL, Excel, TM1, and Flat Flies). Development platform was Visual Studio
b. Informatica used as auto documentation platform.
Requirements
1) Use RUP (IBM) methodology and Rational Rose to model enterprise data systems using UML
2) Used Excel for data export to analysts
3) Automate importation from financials using tape backups of ASCII delimited data
4) Automate importation of HR data from PeopleSoft application (Oracle 8i)
Changes
1) Switched from Rational Rose to MS Vision for UML and initial database diagramming
2) Use Word and PowerPoint to create presentations and formalize system documentation
3) Integrate MS Project Manager to track development and deployment status.
New Technology
Introduced Cache (Post Relational Database) for tracking sales, crossing selling performance and commission shares
1) Multiple levels of administration by department and business silo
2) Real-time analytics
3) Integrated web deployment with internal VPN and encryption for security
4) System ran identically on MS Server, IBM and RS 6000 servers allowing customization per department and/or existing platforms in use.
2005 PNC
1) Designed Oracle-based data warehouse as SIM (Security Information Management System)
2) Designed ETL, data scrubbing application using Visual Studio, Visio, Microsoft DTS Services
3) Compensating Control and workflow analysis integration
4) Integrated performance management analysis
5) Designed and deployed BSDI (Oracle) C-2 secure facility for Sox and HIPPA designated data feed into BI system (Oracle 10i)
Present
Designed MDM (Master Data Management) architecture for automating data normalization, documenting critical incomplete data and creating temporary architectures to meet enterprise OLAP requirements
1) Microsoft applications, DTS and modeling applications extensively used for Enterprise BI Project.
2) Java platform and Apache suite used for Legacy applications where desired
3) Informatica used as ETL for legacy model and documentation generation for whole project
4) DB2 as main platform for BI Solutions
a. Integrate from any data source
b. Citrix used for VPN and remote data viewing
c. Export to Excel option for analytics
d. Export to Word function and Crystal Reports for reporting
e. Visio used for UML modeling and flow analysis during development
f. Visio used for work flow preparation
g. MS Project and MS Project server used for PMP functions.
h. Gap analysis and advanced analytics using Mathematica integrated with Excel and MS SQL 2008R
Advanced BI design
1) Star and Snowflake Schema design and real time integration with production systems
2) Higher Normal Form design for integrating regional and international data (4th and 5th Normal Forms, i.e. domain normalization)
3) Start eliminating redundancy in OLAP systems without effecting processing speed or availability
4) Integrate real-time advanced analytics using matrices (multiple dimension analytics)
a. Human genetics - research
b. Animal genetics – research
c. Automatic translation of genetic information to binary for real-time processing
5) Design fundamentally different BI architecture based on geometric modeling (Synergetic design)
6) Integrate social media (closed social media) information
7) Create predictive analytic module