Orion Star Technical Services

•	Managed global security controls, audits, and implementations for SOX and CyberSecurity LA.09 Group.  Helped to get the PCI requirements to get program plan started for PCI 4.0 adoption with updated requirements and plan for other teams. 
•	Collaborated with internal audit and external consultants to evaluate the effectiveness of IT controls, resulting in a 32% reduction in audit findings.
•	Coordinated with C-suite executives and stakeholders to align cybersecurity strategies with business objectives.  Led with working with QSA to achieve PCI work ahead of dates.
•	Reviewed and updated incident response plans, ensuring timely response and mitigation of potential security breaches and cleaned up former Azure environment updates to AWS.
•	Led cross-functional teams to achieve project milestones on-time and under budget after a re-organization and cleared the PCI requirement ahead of PCI 4.0 adoption timelines.

Senior Technical Program Manager - SOX and PCI

Panda Properties LLC

Property and Financial Management of 34 residential and 5 business corporation locations.   Structuring of financial, entities and issuance of long term leases as well as management of trusts.    Quarterly revaluations, disbursements and acquisitions of new commercial and business locations for both strategic and tactical purposes in both Georgia, South Carolina and Florida.   Provisioning of angel investment funds for secured purposes and long term management for combined REIT's.  Providing of financial P&L's to the trust's management and to legal entities as well as dealing with both legal and financial administrators.  Management of secondary management companies in addition to the reporting of the investors.

Equifax

•	To get cooperation across global resources driving adoption to helping product teams to successfully manage PMO and their global engagements, coordinating across Product, D&A, and Tech teams.  Responsible for Rescuing the Luminate UK Deployment and redesigning a program 36 weeks behind and released on time and with high customer targets accomplished to reward of UK CTO.   After completion in Q3 2023 was then brought into manage the EWS Product Portfolio of 16 Products and oversight of Product Managers, Project Mangers and Architects for the Decommissioning and Kount efforts.  Identity and Fraud Governance as well as dealing with clients for deployments.  Regulatory compliance of product journeys and improvements to the API program development.

Director P4, Senior Execution Consultant -  Global Identity & Fraud Program Manager

ISO 27001, SOX and other compliance areas as well as Cyber Security PVM efforts.  AWS, Azure and other environments merged into a unified worldwide GCP Environment.  Oversaw meetings with regulators for Federal and MSAG for compliance and helped to lead training efforts as well as risk remediation items for PCI and did ISA work for PCI DSS.   CyberArk upgrades and regulatory compliance for EU, Canada and UK.

Program Manager - Security & Compliance

Manager - Planning & Execution 

Orion Star Technical Services LLC

•	EQUIFAX -Brought in to handle severe issues with the issues of a Consent Order due on 12/31/18 facing immediate fines for the SIERRA IAM / PAM (Privileged Access Management) CyberArk and OKTA Program totaling over $172M from both State Banking, Federal Financial and Security Regulators.
•	Managed a program from 18% to 100% completion by 1/31/2019 after legal exceptions were arranged with audit oversight.
•	Worked with 16 business units including international groups in conjunction with Audit, Legal, Security and other groups
•	Managed oversight of the CyberArk Team as well as creation of Process and Procedures for implementation and onboarding
•	Meetings with State and Federal Regulators as well as internal and outside auditors for completion of various items.
•	Received 3 letters of merit for work accomplished leading to success.
•	Training of Project Managers to enable new security functions to be compliant with new GDPR and US Regulatory Items.
•	Managed 4 Project Managers and supervised a budget of $5M for SIERRA implementation

Senior Technical Program Manager

•	Checkpoint of QSA PCI DSS 3.2 Security Assessment and GDPR EU Security Audit for PEOPLESOFT ERP Systems for ISO/PCI DSS certification. 
•	Training of Project Managers to enable new security functions to be compliant with new GDPR and US Regulatory Items.
•	Outline of a new format, process improvement, and procedures for the PMO and Program Managers that would be compliant with future programs and selection of new applications after a troubled M&A.  Budget of $4M for burn down associated.
•	Helping with Salesforce ERP issues in doing upgrades and negotiation of software licensing agreements for a future state and working with regulators from Department of Energy.
•	Updating listing of all regulatory and security compliances for the organization
•	Implemented process changes that resulted in improving on-time completion of security review engagements from about 22% to about 78% within a six-month period reducing risk mitigation.  Application recommendations for better productivity with reduce the cost to a PAW matrix.  Made sure that ITILv3 compliance was adhered to for ITSM functions.
•	Championed the need for security consultants to engage with development teams earlier in the life cycle resulting in a significant reduction in the number of issues raised at the risk assessment and security testing stages.  Set more aligned KPI’s for vendors along with a scorecard to be done monthly as an audit goal.  Vendor management engagement with improved productivity.
•	Cross-trained security consultants across application streams resulting in increased productivity
•	Standardized risk ratings across the security teams to ensure a consistent response to risk for PCI efforts and Executive Reporting.   
•	Created security patterns that enabled better and effective utilization of valuable security consultants time and effort while further mitigating risk items before they became issues.  Repeated rollout of PCI training, ongoing education for audit goals.

Senior Program Manager    (Contract)

NTT DATA Corporation

•	Planning, design, development, maintenance, engineering, integration and retirement of information systems
•	Management and supervision of over 256 personnel and oversight of a $165M yearly fiscal budget.  Managed CDC ITSO areas.
•	Collection, analysis and management of data, information and knowledge from multiple sources for processing.
•	Application development for full life cycle of Health IT, public health informatics
•	Maintain and improve all Health Metrics and Analytics Programs.  Work with various units and agencies to obtain, develop, maintain and provide extended forecasting of healthcare tools, data opportunities, research development and ongoing project projections.
•	IT Senior Manager directing all delivery activities and single point of accountability to the customer for data center hosting engagement for the Applications Hosting Branch of the Centers for Disease Control and Prevention.
Managed the overall program planning for the implementation of ISO 20000 Service Management & ISO 27001 Information Security Management Systems
• Monitored and measured the tasks/milestones associated with the ISO Service and Information Security Management System Implementation project.planning, developing, and executing internal audits.
• Was able to reduce the replicated fragments of information across distributed networks of web servers through automation and mesh/edge computing goals for autonomic and grid basis for a node less instant availability.
Design, installation, management and support of networks, data centers, backup sources, servers, computers, telecommunications, network monitoring, conferencing services and information security systems.  Program reduced and rescoped to a single Program Manager with reduced workforce.

Delivery Director - Application Hosting Bureau at CDC (Center for Disease Control)

Orion Star Technologies Services LLC

Information Technology and Project Management consulting  with a focus on Microsoft and Cisco products.  Helps to set the path for companies large and small to meet their goals faster, more efficiently and with higher-quality results - whether embarking on a major capital project or developing a new product or critical initiative as well as recovering from other situational events.

Specializing in Project Setups, PMO setups, Project Path implementations, Recovery efforts, reorganization methodologies, new integrations & upgrades,  financial matching to projects, project coaching through situations, VMware virtualization and Data Center consolidations. Utilizing Agile, Scrum, Six Sigma-Black Belt, RUP and other methodologies.  QSA Advisor for PCI-DSS, HIPAA, HITECH and HITRUST items.  Providing global advice and support on all aspects of compliance with privacy laws and regulations including GDPR, ASEAN, Data Protection Directive 95/46/ec, Internation Safe Harbor Privacy Principles, Data Privacy Protection Directive, 
Currently supervising 200+ personnel onshore and offshore and responsibilities extending to $ 25M budget.  PCI-DSS 3.2, HIPAA-HITECH and SOX proficiency and guidance toward compliance as well as process improvements.
Finished with a major Merger and Acquisition of a $1.4B Korean conglomerate to a new international organization with headquarters in the Alpharetta, GA area.

Program Director

First Data Merchant Services

•	Management of various projects and work on Moneysend OCT and STAR programs with Enterprise Deployments.
•	Auditing and leading implementations to ensure compliance and controls with various certifications (PCI-DSS, ISO 27001, SSAE 16, HITECH-HIPAA, SOX).  Managed 7 large credit ERP networks to improve performance and upgrade in place.
•	Working with advanced payment systems and processes to enable credit card payment transactions with numerous global, high volume payment centers while maintaining encryption and other standards.
•	Overcame challenges of constraints impacting ability to meet regulatory and contractual deadlines to successfully deliver a wide range of high-profile projects.
•	Arranged deployment of both 12 customized off the shelf applications and 5 in house built applications for merchant based customers 
•	Responsible for full process from credit initiation process to all layers (application, storage, data and end) with encryption standards to maintain security and network integrity.
•	Improved on efforts from a 30% retention rate to a 92% retention rate while bringing overall ROI 38%
•	Forged and nurtured strong partnerships with internal sponsors and stakeholders to bring greater focus to priorities and expectations.
•	Managed a large Investment Program effort for VISA, Mastercard, PayPal, State Lottery OCT, major insurance companies that resulted in $6M a month revenue return

•	Brought into handle a specifically troubled Spin Off (TSA) under implementation before June deadlines.  Accomplished management of 65 projects to completion and managed the burn down of budgets to final closure.   Managed $150M budget, 416 personnel, 36 project managers and 4 program managers for success driven initiatives.
•	Partner with Presidents’ and Executive Teams of both organizations to effectively integrate all functions within both organizations.  
•	Spearhead all integration efforts ensuring a smooth phase-out of infrastructure.
•	Develop a streamlined integration roadmap tailored to various deal structures, within the framework of the company’s overall integration PCI methodology.
•	Managed reporting and resolution of issues, risks and dependencies, proactively identifying potential planning gaps, suggesting mitigation to risks, actions to close issues or complete open items.
•	Software License Negotiations across lines of business with procurement efforts against Oracle, Microsoft, BMC Remedy, SHI, HP and other vendors.   Resulted in a savings of $ 42 million across 586 applications.
•	Establish improvements in acquisition integration processes/techniques and best practice methodologies
Manage cross functional teams ranging from Technical Product Management and Engineering, Operations/Fulfillment, Ad Trafficking, Marketing, Resellers, Business Development, Training, Legal, Real Estate, Software Licenses and Vendors across 30 groups.
•	Serve as a communication hub for project status across various business units 
•	Develop project plans, manage scope, deliver milestones, and ensure that all teams have the information needed to make informed decisions   
•	Own the execution of specific products and lines of business.  
•	Lead and/or contribute as an individual resource or subject matter specialist to cross-functional projects with regards to dates, risks, impact and schedules
***    Completed all projects under schedule with forecasting and next steps

ACS Healthcare Provider Solutions

Leading the overall technical and program management responsibilities for the North Dakota Medicare Management Information System (MMIS). Leadership responsibilities include oversight across 14 global project teams (e.g. infrastructure, integration, custom development, reporting, data architecture, security, AVRS, OCR) for a staff of 200 technical resources and a $ 40M budget dealing with 38 concurrent projects. Credited with reforming a troubled project through introducing formal defect and change management practices, project management, quality controls, and performance metrics accompanied with program governance processes. Technologies included MS Project Server, Rational Clearquest, RequisitePro, Sharepoint, large-scale data center operations, mid-tier unix operations.
Helped to adapt a payment processing system for SDLC integration with PCI DSS enabling EDH/PII sharing in a class 5 data structure and using co shared payments for billing and PO's.

Technical Program Manager

With over 19 years of IT industry experience and a Juris Doctorate degree, I am a Senior Technical Program Manager at Orion Star Technical Services, a leading provider of IT solutions and services for various sectors and industries. I manage global security controls, audits, and implementations for SOX, PCI DSS 4.0 and Cybersecurity LA.09 Group, ensuring data integrity, confidentiality, and availability for our clients and partners.

As a certified CISSP, Six Sigma Black Belt, and IBM Agile and Scrum professional, I have successfully led and delivered complex and high-impact projects across multiple domains and geographies, such as M&A, TSA, greenfield, and cloud migration. I have also developed an enterprise information security framework, created a 2-year mobility and cloud migration roadmap, and delivered training documentation for various compliance standards. My goal is to provide high-quality IT solutions and services that support the growth and innovation of my organization and clients, and that align with the best practices and regulations in the cybersecurity field.

Taplio

John Gassett, PMI PMP's Linkedin Analytics

John Gassett, PMI PMP

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}John Gassett, PMI PMP's Linkedin Analytics

John Gassett, PMI PMP

Want to drive more opportunities from LinkedIn?

John Gassett, PMI PMP's Linkedin Analytics