Michael Furlong

Providing consultancy to the European Commission, in the areas of business, security, and compliance requirements related to the design, implementation & operation of IT systems for the Digital Services Act (DSA) within the European Union.

Project tasks include:

•Built & manage wiki spaces to foster communication and collaboration between the DSA policy team, stakeholders and engineering/developers; including Project plans, Architecture, Business requirements, IT Security, Governance & Knowledge base while also recording detailed meeting minutes.

•Analyze technical specifications/functionality of all proposed IT systems and databases against the business, functional and budgetary requirements of both the DSA project and European Commission.

•Prepare written reports summarizing analysis and findings of proposed IT systems and databases and provide "go/no go" recommendation on purchase and/or implementation.

•Prepare visualizations and communication materials describing the workflows for proposed IT systems and for delivery to stakeholders.

•Provide written reports that include detailed cost estimates, proposed project schedule and resource requirements for the successful development and implementation of IT systems and databases.

•Create internal documentation on IT governance for development of internal systems and databases, including: Project Charter, Project Initiation, Use Cases, Business Cases, and Prototypes.

•Liaise with the DSA legal & policy team to ensure IT systems and databases will successfully support the effective implementation of the regulation.

•Monitor the daily performance of the L1, L2 & L3 support around the IT systems related to the DSA.

•Develop legacy documentation outlining purpose, design, and processes to be used for the development of IT systems and database related to the DSA.

• Technologies include Atlassian, AWS, IBM, Microsoft, Oracle, xWiki, Clever Cloud, OpenProject, OVH, Open source, In-house, Legacy, On-Prem and Cloud.

Client: Facebook (Meta)

Managed teams working on Risk Management & Compliance covering the following areas:

• Governance Risk and Compliance Management.

• Security Threat and Risk Assessment Management.

• Security Auditing & Compliance.

• IT Auditing & Compliance controls testing/standards - SSAE 18, SOC1/SOC2, ISO 27001, ISO 27018, ISO 27701, SOX ITGC, PCI & NIST.

• Security & Information Security assessments & System Review (ISMS).

• IT Service Management as per ITIL framework.

• SOC Operations

Senior Business Analyst for Information Technology Risk & Compliance on the following projects:

• IAM Upgrade & Enhancement - Sailpoint IIQ 8.1 upgrade, entitlement description management enhancement & expansion of systems covered.

•Exception Management Enhancement - ServiceNow upgrade (Orlando) along with two phases around approval workflow, SLAs, states and improved form information.

•Vendor Risk Management - CyberGRX rollout and integration.

•UAT Testing, Documentation & Training on these projects using Agile, Stories & Tickets via ServiceNow.