Associate CIO and Chief Information Security Officer
Andrew was appointed the DOT Associate Chief Information Officer (ACIO) for Cybersecurity and Information Protection and Chief Information Security Officer (CISO) in March 2015. In November 2019, Andrew’s responsibilities expanded to include the DOT ACIO for Strategic Portfolio Management (SPM).
In his role as ACIO/CISO, Andrew oversees the cybersecurity and information protection programs at DOT, which include the DOT privacy, records management, and paperwork reduction act programs, with operational and strategic emphasis upon protection of DOT information systems and assets; development of new cybersecurity services and capabilities; policy, oversight and compliance activities; and maturation of the cybersecurity and privacy risk management capabilities and programs. Andrew also serves as a senior advisor to the Chief Information Officer (CIO) and other senior leadership on matters of cybersecurity strategy and policy.
In his role as ACIO/SPM, Andrew oversees DOT’s $3.5 billion portfolio of information technology, and overall IT governance for the agency including IT policy, capital planning and portfolio management, enterprise IT risk management, enterprise architecture, and IT supply chain risk management. Andrew also collaborates with the ACIO for Resource Management and the Departmental Office of Human Resources in IT workforce planning and management.
Prior to his position as ACIO, Andrew supported DOT in a number of other roles, including leading the DOT New Headquarters IT project team that built the IT systems and networks for the current DOT headquarters facilities, information systems management for the Research and Innovative Technology Administration (now the Office of the Assistant Secretary for Research and Technology), and IT systems development and operations for the National Highway Traffic Safety Administration.
Andrew has more than 30 years of experience in information technology, including IT operations and support, application and system development, IT governance, project management, and cybersecurity. He received his BS from Cornell University in Mechanical Engineering/Mechanical Design.