Hutch Galego
Resume
Home: / 02 9662 4994
Mobile: / 0409 070 958 / 20 Asquith Avenue
E-mail: / / Rosebery NSW 2018

Results focused IT Professional, withsuccessful Project Management track record having delivered large complex environments across multiple industries, globally. Expert knowledge in Information Technology in the areas of cyber Security, ITSMServices, Systems, and Operations, as well as Cloud based Services Networks & Server infrastructure, and Applications. Excels at Vendor Management, stakeholder management, Leadership and Strategy Implementation. ITIL v3 certified, PMO, PMbok,Prince2 Practitioner. MBA graduate Nov 2015.

Key competencies:, Project and program Management; Security and transformations, Service Delivery, Strategic formulation and implementation; Business Case Analysis, all facets of IT Operations; Lead complex regional programs, Middleware Integrations, Web services and Security Operations, Compliance (sox), Team management & Leadership, Procurement & vendor management.

Career Summary

Dec 2014 – NowSenior Project Manager – Macquarie Group Limited

April 2014 –Nov 2014Senior Project Manager – Fuji Xerox, Document Management Solutions

Nov 2012 -April 2014Senior Project Manager – First Data Corporation, Financial Services

May 2012 – Oct 2012Project Manager – University of New England

April 2011 - May 2012Project Manager – Sydney University

2000 – 2011Manager, IT Services - Web Integrations & shared services

Asia Pacific, Johnson & Johnson

1995 – 2000Information Technology Consultant, QBE Insurance Limited

1990 – 1995Systems Administration, TNT Freight Services

1989 – 1990Support Analyst, MLC Capita

1987 – 1989Manager / Technical Administrator, Select Software

Career History

Dec 2014- Current
Key Responsibilities: / Macquarie Group limited – Corporate Operations Group - Technology
Senior Security Project Manager (Contract)
Global Project Delivery
Enterprise wide Security Services implementation
  • Aruba Network identity Implementation – ClearPass –Secure Port – 28 countries - Worldwide
  • Includes: Network Port Security, Device Profiling, Certificate based authentication
  • Mobile connectivity; Employee & Guest Wireless
  • Roll out 173 office location, 300+ LAN switches – IOS upgrade & application of ClearPass configurations.
  • New Enterprise ServiceSplunk – Data analytics & DashboardReporting – In the Cloud (AWS)
  • Establish a home grown Splunk Managed Service in the Cloud – SaaS
  • Hybrid service model -
  • Lift and Shift the banks’ internal Splunk Applications to AWS Cloud
  • Vulnerability scanning Qualys, pen testing.
  • Negotiated new commercials, expanded services from network perimeter to internal global data centres
  • Architected and deployed 20 Qualys scanners capable of carrying regular vulnerability scans to over 5,000 servers in a automated schedule per month.
  • Security assurance automation and integration. Fortify – Code Scanning.
  • Established cloud based code scanning services to effectively reduce the vulnerabilities of system application developments.
  • Established a self service, automated, and cost effective model based in AWS dedicated cloud environment.
  • Unix - Samba Shares Vulnerability remediation and McAfee implementation.
  • Identify vulnerabilities & Apply remediation
  • Establish a support service for Unix Samba shares.

April 2014– Nov 2014 / Fuji Xerox, Document Management Solutions
Senior Project Manager (Contract)
Asia Growth Program – Information Security Client Information
Security Protection Program

Key Responsibilities: Process improvement – Infrastructure, Compliance and remediation.

  • Lead Solution and IT Security remediation implementation, liaise with Key Regional stakeholders to advance Company Security Posture
  • Improve Client systems protection, review IAM practices, and carry vulnerabilities remediation
  • Create & Implement Cyber Security roadmap to support business growth expansion across 10 countries in Asia Pacific
  • Develop & Implement Information Security as a Service (ISaaS) for Fuji Xerox

Asia Pacific region

  • Operationalise Governance & functions and system capabilities to deploy new Security service
  • Delivery of Security systems in support of Security capabilities (Nessus)
  • Manage Resources, Budget and Program Reporting

Major Achievements

  • Completed Security Survey and analysis across 172 regional offices, established a risk profile, initiated ISO270001 compliance scope and a Vulnerability scanning program.
  • Established new internal Information Security as a Service capability to 10 countries across APAC
  • Significantly improved company security posture by executing vulnerability remediation to regional systems and networks

Nov 2012 - Apr 2014 / First Data Corporation, Financial Services
Regional Senior Project Manager (Contract)
IT Security – Defence in Depth Program

Key Responsibilities

  • Program implementation for APAC Region & strategic business alignment
  • Resources, Budget and Program Reporting
  • Delivery of Key Infrastructure systems and Security infrastructures
  • Stakeholder management, Internal & external SME & business engagements

Major Achievements

Defence in Depth Program: Asia Pacific

SecureWorks: Successfully implemented real-time Network Perimeter monitoring and threat management system as well as Integration with Splunk Central longing system for incident correlation & escalation.

Messageway: Implemented Secure File Transmission (Encryption) for all the organisation B2B file transmission.

Data Loss Protection: RSA Data Centre and Messaging modules, Scoped and defined requirements to meet Personal card Information (PCI) and met financial compliance requirements.

Established strategic direction, reviewed and mitigated critical security polices, consolidated, standardised and established a modular security infrastructure using the latest technologies, improving overall efficiencies and costs. Refreshed perimeter firewalls and monitoring capabilities, rolled out Web Application Firewall (WAF) as well as enhance current Vulnerability Scanning capability. (Tripwire) and extensive Workstation Hardening program including LANDesk & MBAM – Asia Pacific Wide.

May 2012 – Oct 2012 / University of New England
Project Manager (Contract)
Courseware Redevelopment Program

Key Responsibilities

  • Courseware Redevelopment Program with seven Workstreams: Planning and Scoping
  • Lead initial phase of Courseware redevelopment planning

Major Achievement

  • University wide Projects solutions & design – $12 Million budget

Successfully completed planning phase of program

  • Successfully met budget criteria and resource allocation
  • BI Application Development (integration)

Apr 2011 – May 2012 / Sydney University
Project Manager (Contract)
Web Security Program of works

Key Responsibilities

  • Delivery of Key infrastructure and system upgrades:
  • Email malware protection
  • Campus Network redesign & security classification
  • Enhance security for Web applications
  • IAM review
  • Project RFQ/P’s

Major Achievements

  • Web Security Program: Successfully implemented University wide range of web security projects totalling $4M+, including Telco grade MPLS Core Network upgrade, new Border Routers, F5 Load balancers, Implementation of University Perimeter Firewall & respective firewall rules migration, Intrusion Detection Services, provision of Hosting Services zone DMZ & related Application migration.
  • Successfully implemented complex Firewall deployment including migration of 30,000 security policies including intrusion detection services using a wide range of technologies(Cisco, checkpoint and Fortinet), to suit environment and security requirements.
  • Replace in-house Sophos University’s CleanMail AntiSpam system with new cloud based solution, Symantec Message Labs.
  • Migration of Web Services to new secure DMZ zone
  • Review and Enhance Identify Management System - IAM

April 2008 - March 2011 / Johnson & Johnson (Health care)
Manager, IT Services - IT Project & Services, Asia Pacific
(permanent position)

Key Responsibilities

  • Project management. Lead regional Infrastructure & integration projects from planning to deployment & steady state.
  • Provide consultancy to Operating companies in the areas of infrastructure, Security, Web hosting, Collaboration & b2b integrations.

  • Support regional business relationship managers in their service delivery and service consulting.

  • Represents the voice of the customer for Asia-Pacific in the Global Product Management initiatives - for Products, Services and Solutions.

Major Project Management Achievements

  • Project Managed key regional infrastructure projects eg: Secure Network infrastructure (5Million 14 countries), ISP selection & service implementation ($200K savings annually), Servers regional integration & consolidation ($250K savings), Deploy email gateways & Messaging services, Singapore DC backup Solution
  • Introduced shared infrastructure services to Asia Pacific, built shared infrastructures in Japan and in Australia to service the region, (including DR strategy) enabled Operating Companies to save significant capital by adopting shared infrastructure platform and user pay service model. Enabled business to become more agile by provisioning standby services.
  • Successfully consolidated 20+ regional Data Centres, into 3 major data centres.
  • Received PM award for delivering Global HR transformation integration project, 500 interface integrations worldwide in record time and with a cost model $10Million lower than external bids
  • Achieved rating of 7 out of 9 for annual results against yearly targets (only 2% of global J&J staff achieving a rating of 7 or better).Recognizing that performance consistently exceeds job standards.
  • Successfully completed ASPAC hardware upgrade/ server consolidation Project and WebMethods software migration from wM6.1 to wM 7.1 Japan and Australia.

Jan 2004 – Feb 2008 / Johnson & Johnson
Project Manager – eSolutions Platforms

Achievements

  • Able to reduce Server Operational costs by 50% - improving service quality and customer satisfaction.

  • Managed the eSolutions Operational Metrics meeting exceeding the set targets and stretch targets for period 2005 to 2008.
  • ITSM Service improvement (helpdesk) and the introduction of Problem management.

  • WebMethods Shared Services established in ASPAC where key applications such as Global employee expense portal, P2P and Japan EDI are running today very successfully.

  • Deployment of Business Manager Console – a user friendly browser based tool that empowers business to monitor status of business transaction – ONE investment that is now leverages by many operating companies.

  • Deployment of ACMS integration application in Japan enabling external Financial institutions to interface with J&J ERP systems, securely and efficiently.

  • Successfully migrated eRoom infrastructure/data from across the region to Single global site. This consolidation represented $200K in cost savings with added benefits in the areas of system management and failover.

  • Recognised by Global VP-IT Shared Services as driving the achievement of results for eSolutions Services via development of strong partnerships and relationships in NCS, CIM and OPCO’s globally & for always putting J&J interests at forefront of any activity above personal interest & earning the respect of clients, peers & Management.

Key Responsibilities

  • ITSM service owner for Managed web hosting services for J&J business regionally.

  • Responsible for managing ASPAC Web Hosting 60+-server infrastructure, including technical support to resolve all related incidents, understand the application needs and ensure business operational needs are met, scale and performance.

  • Lead several projects with teams 20+, including full time consultants and engineers. Responsible for allocating resources, and motivating staff by mentoring and carrying out periodic reviews on agreed measurable goals & objectives

  • Capture web Hosting business demand, Manage budget & billing for services provided region wide.

  • Responsible for compliance (SOX, GXP, IAPP, WICO), production operations, reporting and driving efficiencies.

May 2000 – Dec 2003 / Johnson & Johnson
Internet Consultant – Network Computing Services

Achievements

  • Deploy Regional internet infrastructure – throughout Asia countries enabling business to be better connected & leveraging on VPNs and lower connectivity costs.

  • Provision the ability to remotely connect to J&J Network – no matter location. Introduced VPN, this provided flexibility and greater productivity.

  • Conceptualized and delivered employee self service home ISP provisioning. With 100’s of employees that require internet access to access work, a standard process was required to gain efficiencies both in performance, support. Reduced ISP monthly bill by more than 50%.

Key Responsibilities

  • Web hosting services & strategy
  • Responsible for internet services for ASPAC
  • Development – Work with the WW Development team
  • Deployment – Work with the Deployment folks in Singapore
  • Operations- Turn over to Operations when in production
  • Manage any outside services

Jun 1995 – Apr 2000 / QBE Insurance Limited
Information Technology Consultant

Achievements

  • Developed a strategy based on Virtual Private Networking (VPN) technology to harness the potential of the Internet for QBE's competitive advantage. Implementation of QBE's first VPN between its head office and the New York office resulted in achieving +80% cost saving.

  • Conceived and championed the need for establishing a low cost, business-to-business e-commerce model to facilitate information exchange between QBE and its brokers. Successful implementation of this solution at two brokers resulted in achieving significant cost savings and high customer satisfaction.

  • Lead the introduction of cc:Mail, Advance printing solutions & Novell WAN network.

  • Pioneered the Internet and Intranet (I-Net) development efforts at QBE.

  • Conducted detailed cost/benefit analyses using Net Present Value (NPV) and Internal Rate of Return (IRR) techniques to assess and quantify long term financial benefits to QBE when undertaking major IT projects.

Education

2015
2014
1987 / MBA (Major in Information Technology – Charles Sturt University – Nov. 2015
Graduate Certificate in Project Management - Charles Sturt University
Computer Programming Diploma, Control Data Institute
1986 / Data Processing Certificate, Business & Commercial Systems, Sydney Technical College

Key Training Courses

2013
2012
2010 / Graduate Certificate in Project Management (PMbok) – Charles Sturt University
Prince2 Practitioner
ITIL Version 3, Service capability – 5 day course – Service Offerings & Agreements
2008 / ITIL Version 3, foundation course
Successfully completed ITIL Version 3 bridge training and passed exam
2007 / Business Management Fundamentals, J&J In-house course
This is a 12 month Johnson & Johnson course geared towards becoming a better manager and aligned to company values and processes - covering J&J Credo, Leadership, Talent management, self management, coaching and teamwork
2006 / ‘Effective Communications & Human Relations’, Dale Carnegie Course
Effective Communications and Human Relations to strengthen interpersonal relationships manage stress and handle fast-changing workplace conditions
2005 / Project Management – 5 day advance training - PMBOK

Personal Interests People, introducing changes that make a difference,Technology, Travel and Sport

Referees available upon request