Rick O.

Helping you to Accept Good Risk, Transform Your Business, and Thrive. Services include: • executive information security and risk management consulting, • cybersecurity program design, management, and governance, • virtual Chief Information Security Officer (CISO) • transformation through IT and process improvement, • risk management: strategy, design, and implementation, • risk-based project management, • Business Continuity Planning, • Performance Management consulting and design - Balanced Scorecard, SOMIA, KPIs, KRIs; and, • Internal Control Framework design and implementation

Excited to be working in Saint John again!

As a tireless champion for Enterprise Risk Management within the province, I led a small and passionate team architecting, proposing, and delivering a layered and integrated enterprise risk management program which was framework driven and systems-based. In August 2019, I was recognized as being both knowledgeable and passionate about ERM, commended on my work with departments, and noted as having had enhanced risk management within the Government of New Brunswick. Also, in this role while supporting the newly appointed CIO, I led the Office of the CIO’s contribution to the newly formed Treasury Board’s Accountability Framework.

During this assignment, I reported directly to the head of government, the Clerk of the Executive Council as the provincial CIO. • Recognized as having improved cross-team collaboration with Service New Brunswick • Prepared a proposal for a GNB Cyber Security Centre of Excellence • Led the Open Data Policy development and presented it to Executive Council • Presented the Business Case for Enterprise Risk Management to the clerk

Served as the second-in-command and the chief operating officer of the Government of New Brunswick’s Office of the Chief Information Officer (OCIO). • Co-redesigned the OCIO, and architected team structure and required roles • Managed creation of job descriptions, wrote several of them, and proposed pay bands • Led the design, development, release and maintenance of OCIO Business Plans • Proposed and led the design of an OCIO Management System • Led the design and delivery of OCIO Balanced Score Card measures • During the Treasury Board design project phase, led the IT Common Services Investment Management project and proposed a government-wide Portfolio Management program. • Maintained executive responsibility for the cybersecurity program, as the CISO reported into me.

As the CISO, I was responsible for establishing and managing GNB’s comprehensive enterprise informationsecurity program and ensuring it aligned to GNB’s goals and objectives. The cybersecurity program: • Was responsible for the establishment and maintenance of all data/information security policies, standards, risk assessments and security awareness programs • Held architecture and assurance responsibility for all security processes and technologies used across GNB • Had government-wide responsibility for guiding and mentoring each of the Departmental Information Security Officers in complying with the GNB Security Policy and minimizing Information System risks

"The National CIO Sub-Committee on Information Protection (NCSIP) was established in 1998 at the direction of the Public Sector Chief Information Officer’s Council (PSCIOC) representing all federal, provincial and territorial governments and the Municipal Information Systems Association (MISA). This forum enables participating governments to exchange information, policies, security awareness program practices and architecture initiatives related to information protection." - source www.iccs-isac.org

Responsible to transform the corporate IT Internal Audit program and lead ensuing audits. • Created and presented an IT Audit Roadmap that supported annual audit planning • Designed and delivered an IT Risk Dashboard to inform the executive of future audit requirements • Led the mapping of existing controls to ISO 27002 and COBIT frameworks in support of several 'SAS 70 audit' deliveries • Directed or executed many corporate IT audits

Had responsibility for the Bell Aliant IT Security Program managing the vision, strategy, team, and projects focused on minimizing Bell Aliant’s IT Security risks. • Was recognized by Bell Canada as Bell Aliant’s IT Security Officer • Wrote many business cases and led projects to improve security posture • Proposed and delivered the first Security Operations Centre (SOC) • Created and delivered key cybersecurity Balanced Scorecard measures

During the formation of Bell Aliant, I managed the consolidation of the Accounts Payable departments for NBTel, NewTel, MTT and Island Tel. Responsibilities included aligning governance programs and processes, and building and managing the team and service levels throughout the project. Accomplishments included enhancing internal controls through using CAATs to produce several automated control documents.

Beginning with NBTel, and then via mergers Aliant and Bell Aliant, planned and conducted audits within the full scope of the Audit Universe. Audit areas included Finance, Planning, Information Technology, Network Operations, Environmental Safety, and Physical and Information Security.

Data Analysis