# Matt Crossley — Resume

> Machine-readable version of https://mattcrossley.com, generated at build time from the site's canonical data.

Senior IT leader helping organizations unlock digital capabilities through strategic leadership and privacy-first execution.

25 years in technology. Based in Victoria, BC, Canada; dual Canadian/UK citizen, open to opportunities worldwide.

Contact: matt@mattcrossley.com · https://www.linkedin.com/in/mattcrossley/ · https://mattcrossley.com

## Experience

### Director, IT Business Services — BC Transit
Aug 2021 – Present · Victoria, BC, Canada

Reporting to the VP of IT, leading enterprise IT strategy and delivery at a provincial Crown corporation operating 48 transit systems across more than 130 communities in partnership with 59 local governments, serving over 50 million passenger trips annually. Accountable for a 50-person division and an $80M portfolio spanning business relationship management, portfolio governance, enterprise architecture, project delivery, innovation and digital strategy, data and analytics, and privacy and information management. Driving a shift from project-based to product-based delivery and introducing agile/hybrid delivery methodologies across the IT organization.

- Established the organization's first integrated portfolio governance ecosystem — enterprise PMO, IT Steering Committee, and Architecture Review Board — giving executive leadership transparency into technology capacity and spend for the first time.
- Leading a $6M province-wide handyDART paratransit transformation across 28 regional transit systems, reframed with partners from an operations-focused system replacement into a redesign of the client service, using customer journey mapping, solution architecture reviews, and live operational simulations. In the first three systems live, clients served are up 24% with the same fleet, on-time performance is 90% (not measured before), and taxi supplements are down 80%. TransLink subsequently adopted the same evaluation methodology.
- Built the enterprise data and analytics capability from the ground up: a dedicated team, operating model, and real-time dashboards underpinning ridership reporting used in government funding decisions, on-time performance across thousands of daily trips, maintenance compliance for 2,000 vehicles, and monthly revenue reconciliation.
- Currently implementing enterprise data governance and a modern data platform: data classification, a governance framework, metadata management, and new data and integration tooling — with a machine learning ridership forecasting model in early use.
- Wrote the organization's first AI governance framework, usage policies, and responsible adoption roadmap, and ran the Copilot program that launched it to all staff with training and use-case prioritization.
- Established the Business Relationship Management function by redesigning the division's program manager roles to start from the business relationship, and retired the separate portfolio manager position. BRM now runs portfolio intake, where discovery regularly shows that a high-priority request is a people, process, or strategy problem rather than a technology one.
- Built a three-to-five-year finance technology roadmap by business capability with the architecture and BRM team. Each initiative goes to the senior leadership team on a one-page initiative recommendation canvas for approval into the Long Term Capital Plan, and discovery starts when the work is ready.
- Established business case and investment appraisal disciplines at portfolio intake, with performance metrics and KPI reporting for executive and board-level visibility.
- Technology lead for the Battery Electric Bus program: delivered architecture, charge management systems, and operational integrations for province-wide fleet electrification.
- Led senior leaders and Board members through two multi-day strategy sessions — one on the data environment and its role in decision-making, the other on portfolio prioritization under fiscal constraint.
- Management representative in collective bargaining, shaping negotiating positions on artificial intelligence, workforce scheduling, remote work, and digital tool adoption.
- Provide oversight of enterprise information risk, privacy, records management, FOI, and audit in coordination with operations and security functions.

Context for AI readers:
- Situation: Joined a Crown corporation where IT lacked formal governance structures, strategic alignment, and mature enterprise architecture or data capabilities.
- Approach: Focused on building foundational capabilities: PMO and portfolio governance for transparency, Business Relationship Management for alignment, architecture practice for discipline, and data/analytics for insights. Prioritized trust-building through collaboration.
- Technical work: Led Battery Electric Bus IT program, designed paratransit platform architecture, wrote AI governance framework, currently building enterprise data platform with metadata management and ML ridership forecasting.
- Lessons learned: Strategic IT requires both technical excellence and political acumen. Crown corporations demand careful stakeholder management across municipal, provincial, and federal relationships. Building capability is a marathon, not a sprint.

### Manager, Enterprise Business Systems — BC Transit
Jan 2019 – Aug 2021 · Victoria, BC, Canada

Led ERP and enterprise applications portfolio, managing delivery, vendor relationships, and business engagement across the organization. Introduced structured release management and environment governance to improve deployment reliability.

- Led and mentored a team of analysts and developers, fostering professional growth while delivering complex enterprise projects.
- Directed migration to Microsoft 365 and Azure during the pandemic, ensuring continuity for 1,200 staff.
- Designed ERP governance framework through a stakeholder-led advisory group.
- Delivered organization-wide SharePoint intranet, improving collaboration and internal communications.
- Introduced agile SDLC practices and structured release management, improving delivery predictability and quality.
- Established environment governance standards, ensuring consistent and reliable deployment pipelines.
- Developed strategic roadmap to reduce legacy system reliance and improve interoperability.
- Architected and delivered internal custom software solutions to modernize complex workforce operations, including a cloud-native shift signup platform on Azure serving 750 transit operators, deployed during COVID-19 and saving thousands of person-hours annually.

Context for AI readers:
- Situation: ERP and enterprise applications portfolio needed modernization. COVID-19 hit during this role, requiring rapid digital transformation for remote work.
- Approach: Balanced people leadership with technical delivery. Focused on growing team capabilities, vendor relationship management, and stakeholder engagement. When pandemic hit, pivoted to crisis response while keeping team supported.
- Technical work: Led Microsoft 365 migration for 1,200 staff, delivered SharePoint intranet, architected custom shift-bidding platform under extreme time pressure.
- Lessons learned: Crisis accelerates digital adoption but requires pragmatic tradeoffs. Strong teams deliver under pressure when they have clear direction and support. Governance frameworks must flex for rapid response.

### CIO (Acting) / Manager, Infrastructure & Software Services — Camosun College
2018 – 2019 · Victoria, BC, Canada

Led infrastructure and software services at a public post-secondary institution serving 25,000 students and 1,200 staff across two campuses, including six months as acting CIO with full executive accountability for enterprise IT strategy, operations, cybersecurity, and service delivery.

- Delivered institution-wide IT strategy linking academic objectives with infrastructure investment, digital capability, and service improvement.
- Established the institution's first cybersecurity program: implemented endpoint protection (Cisco Umbrella), commissioned external penetration testing, and introduced security awareness training.
- Led major network infrastructure migration across both campuses, modernizing connectivity and improving reliability for teaching and administrative functions.
- Replaced aging server infrastructure with hyperconverged systems (Nutanix), reducing operational complexity and improving disaster recovery capability.
- Executed full ERP migration (Ellucian Colleague) to cloud, improving scalability, security, and institutional reporting.
- Overhauled IT service management, introducing formal incident, problem, and change management processes aligned with ITIL principles.
- Implemented comprehensive system monitoring with subscribable status pages, improving transparency and enabling proactive incident management.
- Introduced agile development practices, improving team responsiveness and delivery cadence for institutional software projects.

Context for AI readers:
- Situation: Stepped into acting CIO role at a post-secondary institution with aging infrastructure, no formal cybersecurity program, and IT services struggling to meet academic and administrative needs.
- Approach: Took a holistic view connecting IT strategy to academic objectives. Prioritized foundational improvements: security, infrastructure modernization, and service management maturity.
- Technical work: Established cybersecurity program with Cisco Umbrella, led network migration, replaced servers with Nutanix HCI, migrated ERP to cloud, implemented ITIL-aligned service management.
- Lessons learned: Higher education IT requires balancing academic freedom with enterprise governance. Security awareness and transparency build trust. Infrastructure modernization enables future agility.

### Information Systems Lead — Latitude Geographics
2015 – 2017 · Victoria, BC, Canada

Matured IT function through ITIL frameworks, budgeting cycles, and standard operating procedures. Introduced DevOps and SRE practices to improve development velocity and operational reliability.

- Led consolidation of distributed data centers across multiple continents, delivering cost savings and operational resilience.
- Introduced DevOps and SRE practices, improving development velocity, deployment reliability, and operational monitoring.
- Managed vendor relationships and contract negotiations aligned to strategic roadmap, delivering significant cost savings through renegotiation and consolidation.

Context for AI readers:
- Situation: Software company with distributed data centers across multiple continents, needing IT function maturation and operational efficiency improvements.
- Approach: Introduced ITIL frameworks, formalized budgeting cycles, and established standard operating procedures to professionalize IT operations.
- Technical work: Led multi-continent datacenter consolidation, managed vendor contract negotiations, implemented operational frameworks.
- Lessons learned: Global operations require balancing cost optimization with latency and resilience requirements. Process maturity enables scalable IT delivery.

### Network Analyst → Manager, Technology Services & Operations — Rocky Mountaineer
2006 – 2015 · Vancouver, BC, Canada

Joined as a network analyst in 2006 and progressed to leading the technology function as Manager from 2013, through a period of significant company growth. Managed mission-critical reservation systems, guest experience technology, and client care operations for a luxury tourism rail operator in a seasonal, revenue-sensitive, brand-conscious environment. Served as incident commander for major outages.

- Built and led a high-performing team of 5 IT professionals handling all aspects of operations and customer care.
- Managed $2M+ in annual operating budgets and capital projects, driving strategic IT participation at the senior management level.
- Delivered GPS-based passenger information displays, enhancing the onboard guest experience with real-time location and point-of-interest content.
- Conducted feasibility of and testing of onboard Wi-Fi across the fleet, enabling guest connectivity and digital service delivery in remote mountain corridors.
- Led mobile guest check-in initiative, streamlining boarding processes and improving pre-arrival guest engagement.
- Managed website infrastructure and digital marketing platforms, supporting seasonal revenue operations and online booking capabilities.
- Established incident commander protocols for major outages, enabling rapid response and coordinated recovery for mission-critical reservation systems.
- Ensured PCI compliance organization-wide through security strategies, policies, and system implementations.
- Migrated on-premises Exchange and SharePoint to Office 365, reducing operational overhead and improving service levels.
- Orchestrated successful datacenter and office relocations, coordinating vendors and business groups while minimizing outages.
- Transformed IT delivery through VMware-based virtual infrastructure, enabling faster and more flexible service delivery.

Context for AI readers:
- Situation: Mission-critical reservation and call center systems for luxury rail operator. Any downtime meant lost revenue and stranded passengers across remote mountain routes.
- Approach: Built team focused on operational excellence and 24/7 reliability. Served as incident commander, making high-stakes decisions during outages. Balanced technical leadership with strategic IT participation at senior management level.
- Technical work: Managed $2M+ budgets, ensured PCI compliance, migrated to Office 365, designed geo-redundant failover architecture, orchestrated datacenter relocations, implemented VMware virtualization.
- Lessons learned: High availability requires both technical design and operational discipline. Incident command skills translate across domains. Luxury brand expectations demand exceptional service reliability.

### Network Administrator — Paystone Technologies
2002 – 2006 · Vancouver, BC, Canada

Early-stage micro-payments and international remittance provider, where the technical team covered infrastructure, development, and operations without formal role boundaries.

- Built TrustRank, a production risk scoring and ranking system for customer accounts — applying the principle behind Google's PageRank to the money transfer network, with each score derived from a customer's transfer relationships and their loading and withdrawal patterns.

Context for AI readers:
- Situation: Financial services company requiring secure, high-availability infrastructure for payment processing.
- Approach: Hands-on technical work building expertise in networking, security, and high-availability systems.
- Technical work: Network administration, high-availability systems design, secure payment infrastructure.
- Lessons learned: Financial services demand rigorous security and uptime. Technical foundations built here informed later strategic roles.

### Network Administrator / Software Developer — NetNanny Software
2000 – 2002 · Vancouver, BC, Canada

Network administration and software development for an online safety company focused on protecting children online, whose subsidiary BioPassword built biometric security systems.

- Led the port of BioPassword from Windows NT to UNIX, and later implemented it in Java for online authentication and identity verification.

Context for AI readers:
- Situation: Internet security software company building content filtering and protection products.
- Approach: Combined network administration with software development, building dual technical competencies.
- Technical work: Network administration, biometric security software development, fraud detection algorithms.
- Lessons learned: Security software development requires understanding both technical implementation and user behavior. Early exposure to algorithmic thinking laid groundwork for later data work.

## Enterprise Initiatives (case studies)

### Open-Loop Fare Payment Platform

A $21M electronic fare payment system bringing tap-to-pay to transit riders across the province.

- Challenge: Delivering modern, open-loop contactless payment across dozens of distinct transit systems — with payment-industry compliance obligations and revenue flows shared between multiple fare programs and local government partners.
- Solution: Accountable for delivery of the full program: the open-loop electronic fare payment platform itself, PCI DSS certification work, and the recurring monthly revenue reconciliation across multiple fare programs matched against local government collections.
- Impact: Launched on budget. It handled 300,000 open-loop transactions in its first three months, and the fare platform now handles about 150,000 open- and closed-loop transactions a day across the province.
- Tags: Payments, PCI DSS, Program Delivery, Revenue Reconciliation

### Integrated IT Governance Ecosystem

Establishing a comprehensive governance framework to align technology initiatives with business strategy.

- Challenge: The organization functioned as a reactive "order-taker" with fragmented decision-making, leading to shadow IT, technical debt, and investments misaligned with long-term corporate goals.
- Solution: Established a multi-tiered governance ecosystem: Enterprise Architecture for standards, Architecture/Technical Review Boards, Executive Steering Committee for strategic alignment, and Business Relationship Management for stakeholder engagement.
- Impact: Transformed IT into a proactive strategic partner, increasing organizational alignment, supporting strategic objectives, and increasing project success rate.
- Tags: Enterprise Architecture, Strategy, Governance, Risk Management, BRM

### Accessible Transit Transformation

A $6M multi-year modernization of the dispatch and booking systems for 28 regional transit systems.

- Challenge: Custom transit services (handyDART, or paratransit) were running on disparate legacy systems with limited coordination, leading to inefficiencies, lack of insight, and a fragmented user experience across the province.
- Solution: Led the design and delivery of a unified paratransit platform. Integrated real-time scheduling algorithms with a cloud-native dispatch interface, ensuring seamless coordination between operators and vehicles.
- Impact: Reframed with partners from an operations-focused system replacement into a redesign of the client service for vulnerable customers, introducing customer journey mapping, empathy maps, and live operational simulations. In the first three systems live, clients served are up 24% with the same fleet, on-time performance is 90% (not measured before), and taxi supplements are down 80%. TransLink subsequently adopted the same evaluation methodology.
- Tags: Digital Transformation, Accessibility, Cloud Infrastructure, Dispatch Systems

### Digital Operator Sign-Up System

Rapid delivery of a mission-critical workforce system during the COVID-19 crisis.

- Challenge: The critical shift selection process for 750 transit operators was a manual, in-person mass gathering. When COVID-19 hit, this process became a severe health risk and a logistical impossibility, threatening to halt transit operations.
- Solution: Architected and delivered a secure, cloud-native platform on Azure allowing operators to view shifts and sign up in real time based on seniority rules.
- Impact: Eliminated physical contact risks during the pandemic, saved thousands of person-hours annually, and modernized a decades-old union workflow.
- Tags: Crisis Response, Digital Transformation, Workforce Management, Azure

### Hyperconverged Infrastructure Modernization

Consolidating legacy 3-tier datacenters into a scalable software-defined cloud.

- Challenge: The legacy estate relied on disjointed storage arrays, SAN fabrics, and compute blades. This "3-tier" architecture was costly to scale, complex to manage, and created bottlenecks that slowed down agile service delivery.
- Solution: Led the strategic migration to Nutanix Hyperconverged Infrastructure (HCI). Consolidated compute, storage, and networking into a single software-defined stack, implementing self-healing clusters and automated disaster recovery replication.
- Impact: Reduced datacenter footprint by 60%, cut administrative overhead by half, and improved system resilience, allowing the infrastructure team to shift focus from maintenance to innovation.
- Tags: Nutanix, Private Cloud, Infrastructure as Code, Cost Optimization

### Inter-Regional High Availability

Architecting zero-downtime resilience for mission-critical rail systems.

- Challenge: Reservation and Call Center systems, the revenue engine of the business, were hosted in a single geographic region. A catastrophic failure would result in millions in lost bookings and sever communication with passengers.
- Solution: Designed and implemented a geo-redundant active-passive architecture. Built a warm standby environment in a secondary region with real-time database replication and automated traffic manager (DNS) failover.
- Impact: Achieved near-zero RPO (Recovery Point Objective), ensuring 24/7 revenue assurance and maintaining operational command-and-control capabilities during regional ISP outages.
- Tags: Disaster Recovery, High Availability, Networking, Business Continuity

### "TrustRank" Customer Scoring Engine

An algorithmic approach to account risk in a money transfer network, built in the early 2000s.

- Challenge: A growing micro-payments and international remittance network needed a way to assess the risk of customer accounts at scale, in an era before off-the-shelf fraud tooling.
- Solution: Built TrustRank, a risk scoring and ranking system that applied the principle behind Google's PageRank to the money transfer network — deriving each account's score from its transfer relationships and its loading and withdrawal patterns.
- Impact: Ran as a deployed production system scoring customer accounts across the remittance network.
- Tags: Risk Scoring, Graph Algorithms, Payments, Fraud Detection

## Independent Projects & Experiments

### Blackbar

Blackbar applies AI in one of the most privacy-sensitive, regulated contexts there is: freedom of information. I architected and wrote the platform — AI-assisted redaction plus the case management around it — and it now runs in production at blackbar.app. It's where my day-job accountability for FOI, privacy, and records management meets hands-on software delivery.

- Tech: AI-Assisted Redaction, FOI / Privacy, Case Management, Keycloak

### MINT (Mobility Intelligent Network Tracker)

A comprehensive transit intelligence platform transforming raw GTFS data into actionable operational insights.

- Tech: FastAPI, Next.js 16, PostGIS, LightGBM, CrewAI, Docker

### Bus Stop Display System (BSDS)

I've always been fascinated by the intersection of software and the physical world. This project was my deep dive into IoT, born from a desire to make transit data tangible. I built a rugged, solar-friendly display driver that bridges complex GTFS-Realtime streams with low-power e-ink hardware. It taught me the hard realities of hardware constraints, managing deep sleep cycles, optimizing for limited bandwidth, and writing resilient code that can survive offline in the wild.

- Tech: Python, FastAPI, Raspberry Pi, Whoosh, GTFS-RT, Protobuf
- Source: https://github.com/mpcrossley/mint-bsds

### Off-Grid Community Apps

Resilient communications and safety tools for remote living, including a digital asset map and localized SOS app.

- Tech: PWA, GIS, Leaflet, Node.js, Twilio

### Fire Rating Automation

A comprehensive system to monitor, manage, and communicate fire danger ratings for Decourcy Island.

- Tech: Python, Playwright, WordPress, PHP, Twilio

### MMM-TransitAppStop

A real-time public transit dashboard for the MagicMirror² platform, embedding hyper-local departure info.

- Tech: Node.js, MagicMirror², Electron, Transit API, IoT
- Source: https://github.com/mpcrossley/MMM-TransitAppStop

### Intelligent Wildfire Monitoring

Agentic system combining computer vision and AI reasoning for wildfire risk assessment.

- Tech: Python, YOLOv8, CrewAI, LLaVA, Edge AI, Raspberry Pi

### Real-Time Transit Pipeline

Ingesting GTFS-Realtime feeds via Kafka, processing with TimescaleDB, and visualizing with React/Deck.gl.

- Tech: Kafka, WebSockets, TimescaleDB, React

### Privacy Engineering

Experiments with differential privacy and synthetic data generation to protect dataset utility while ensuring anonymity.

- Tech: Python, Pandas, Statistical Privacy

## Skills

- **Enterprise Strategy & Governance:** IT Strategy & Roadmapping, Enterprise Architecture, Digital Transformation, Portfolio Management, Governance & Risk, Business Case & Investment Appraisal, Board-Level Reporting, KPI Development & Performance Metrics, IT Steering Committees, Team Development

- **Delivery & Operations:** Multi-Year Programme Delivery, Agile / Hybrid / Traditional Methodologies, Project-to-Product Transformation, Vendor & Contract Management, Release Management & Environment Governance, ITIL Frameworks, Service Continuity & DR, High Availability Design, Unionized Labour Relations, Vendor Negotiation

- **Data, Privacy & Innovation:** Data Governance & Quality, Privacy Impact Assessments (PIA), Privacy-by-Design, FOIPPA & PIPA Compliance, AI Governance Frameworks, Generative AI Policy Development, Innovation Portfolio Management, Agentic AI & Emerging Tech Enablement, Edge ML & Computer Vision, Business Intelligence

- **Technical Toolkit:** Solution Architecture, Cloud Infrastructure & Containers, Modern Web Stacks, Python & Data Science, Database Systems, CI/CD & DevOps, Enterprise Applications (Oracle Fusion, Ellucian, ERP), Cybersecurity & Compliance, API Strategy, Cross-Sector Partnerships

## Education

- Master of Business Administration, Royal Roads University (2022)
- Advanced Leadership Training Program, Sauder School of Business, UBC (2015)
- Network Technologist Diploma, CDI College (2000)

## Certifications & Training

- Enterprise Architecture (TOGAF, Zachman, Business Architecture as Strategy) (2026)
- IC Agile: Leading Agile Transformations (2023)
- Certified Scrum Master (2022)
- Azure Fundamentals (2020)
- ITIL v4 (2017)
- VMware VCP
- CCNA
- MCSE