Michael Creedon

About Michael Creedon

Over 25 years of experience in IT risk management, cybersecurity governance, compliance, and software development• Motivator with a track record of building high performing and engaged teams• Strong communication skills, able to work with technical and non-technical stakeholders• Understanding of compliance in regulated industries with public company experience (e.g. SOX, PCI, SOC-2 requirements).• High level of adaptability and flexibility gained through working in highly charged, goals-driven environments

Experience

1. Director - Information Security Global Cybersecurity

   Comcast

   Jul 2016 — Present · Philadelphia, PA, US

   Director - Information Security | Global Cybersecurity | 2016 – Present• Pioneered AI Integration: Developed a proprietary AI solution for automated SOC-2 report analysis, slashing manual review time and accelerating risk gap identification for third-party engagements.• Digital Transformation: Lead a cross-functional team of FTEs and contractors in the 24/7 design and support of security solutions within ServiceNow, enabling global GRC functions.• Strategic Governance: Architected Continuous Controls Monitoring (CCM) dashboards for senior management, providing real-time visibility into Supplier Governance and IAM risk postures.• Platform Lifecycle Management: Direct user acceptance testing (UAT) and architectural compliance for semi-annual ServiceNow platform upgrades, ensuring zero-disruption to security workflows.• Program Scalability: Matured the Third-Party Security Assurance program to oversee a vendor population of implementing risk-based protocols that prioritized high-stakes engagements.• Audit Excellence: Spearheaded IAM audits for SOX, PCI, and SOC-2, consistently achieving compliance across applications, databases, and network devices.• Efficiency Gains: Utilized RPA and ServiceNow to automate vendor reconciliation with Accounts Payable, ensuring 100% visibility into new engagements and data exposure risks.• Risk Mitigation: Designed and executed a centralized Access Governance process, enforcing \"Least Privilege\" principles across the enterprise.

Education

• University of Pennsylvania

  Master of Science (M.S.), Organizational Dynamics

• La Salle College High School

  High School

• HEC International Business School (Ecole des Hautes Etudes Commerciales de Paris)

  Project Management

• ENA School of Administration (Ecole Nationale d’Administration) Paris, France

  Project Management

• La Salle University

  B.A., Political Science and History

Skills

• Six Sigma
• Business Objects
• Portfolio Management
• Vendor Management
• Leading People
• Identity Management
• Change Management
• Organizational Dynamics
• Strategic Planning
• Access Control
• Management
• Project Management
• Strategy
• Business Analysis
• Risk Management
• Leadership
• Data Warehousing
• Training
• Requirements Analysis
• Green Belt
• Process Improvement
• Financial Services