John G. Email and Phone Number

Responsible for managing the provisioning of 2+ million access requests per year, to 168,000+ internal customers. Responsibilities include, but are not limited to: Managed budget while maintaining a reduction in overall costs, creation and modification of customer engagement processes, preparation and delivery of executive level project updates, management of internal audit and control functions, consulted with internal auditors during application reviews, in addition to resource management and staffing across applications, databases, and multiple active directory environments. Management responsibilities include 9 direct reports and 104 global based indirect reports.

Responsible for managing the Identity and Access Management program for the CBB Controls organization as well as be part of the Mortgage Banking Business Technology Control organization and for ensuring a consistent application of Technology Controls across the application landscape. Additional responsibilities include: • Manage a team of 18• Business execution of IT Control related programs/initiatives• Governance, oversight, and implementation of the strategic I&AM program along with BAU operations of the toolsets and processes.• Collaborate with Information Owners (IO) to document and obtain approval of access control information across all CCB applications, including instructions for on / off boarding users, access certification, special ID access, etc.• ACF2 profile governance and remediation• Managing awareness and engagement on department initiatives within the Control Office and Business teams• Enforce User Tools Governance and Control implementation with the Business• Mortgage Banking Business liaison for all IT Control related initiatives• Drive the Information Owner support efforts (tools, training, Website)• Manage Communication and Reporting to Operating Division leads to ensure the right level of support and oversight is available• Generate executive reporting and communications on program status

Responsible for production support of the Information Technology Risk and Security Management Infrastructure. Accountable for ensuring a 99.9% uptime on all critical applications as follows; MyID - the firms provisioning tool, CertMyID – the firms certification tool, Single Sign-on, Secure ID, NEIM the firm’s identity and access management tool, IDVault – the firms user identity warehouse, Enterprise Password Vault. Managed the design, implementation, and risk solutions and policies for the Mainframe infrastructure; TopSecret, ACF2, and RACF. Responsible for maintaining the internal businesses customer relationships. Responsibilities include preparation and presentation of executive level project updates, elimination of organizational and process issues and serving as escalation point for all priority one issues, disaster recovery implementations, health checks and day to day monitoring of critical systems. Managed a global staff of 26 associates. Objectives successfully implemented include:• Implemented a production lifecycle process for the infrastructure• Implemented a cross training program to increase coverage during crisis situations• Maintained a 99.9% up time to all systems• Consolidated AS400 emergency access toolset into the Enterprise Password Vault• Implemented a cross training program for all application support groups with-in my control• Implemented additional compensating and detective controls to ensure privileged access is managed appropriately• Managed the IT Risk Management Production Assurance Center to ensure all production changes are completed without degradation to the production environments

Responsible for establishing and managing a product vision for the firm wide Emergency ID Request system and the Enterprise Password Vault. Accountable for researching and understanding the state and direction of the privileged and emergency access arena as it applies to the internal security of the firms IT systems. Functional areas of responsibility include monitoring of system up-time, collection and implementation of application enhancements and security features, management of privileged and emergency access standards, monitoring of privileged and emergency access account on-boarding, certification and usage. Responsible for consulting with the lines of businesses on current system capabilities and developing high level technical requirements for the internal development group to meet clients longer term business objectives while increasing the overall security and reducing the risk to the firms internal platforms, databases and applications. Managed a global staff of 8 associates. Objectives successfully implemented include:• Implemented detective controls with the firms change and problem / incident management systems during the withdrawal stage of emergency accounts to ensure proper paperwork and rationales for usage• Implemented post approval processes to ensure visibility and approvals for the usage of emergency access• Implemented weekly and monthly global statistics to show trends in withdrawals for the firm• Conducted product selection, initial testing, requirements gathering proof of concepts, and final recommendation of the Enterprise Password Vault as the replacement tool to improve and automate work efforts• Designed and implemented the Enterprise Password Vault application for the firm• Managed the largest migration of a CyberArk product by migrating emergency account system with-in a 48 hour period and no downtime

Responsible for the implementation of Wintel (NT and Active Directory) access while adhering to the internal User Access Management Standards for the firm. Functional areas of responsibility included the development of automation processes to increase efficiencies on the management of Wintel Identities, monitoring and implementation of security policies and procedures, second level support for AD and NT domains, assisted in providing metrics around service level agreements on all requests made for the Identity Administration team, and the management of audit security parameters for Wintel based servers. Objectives successfully implemented include:• Migration multiple of NT domains into strategic Active Directory domain• Successful creation, testing, and implementation of SQL group and user administration scripts that mitigated the need for additional headcount• Collaborated in the yearly review of the firms User Access Management Standards

Responsible for managing network and system issues for the Midwest division. Accountability for coordination of production issues representing all information technology systems in a seven state area. Functional areas of responsibility include network connectivity, setup, configuration, and support of Wintel and Unix systems (60), management of NT/Active Directory, Exchange, SQL databases, external connectivity configuration and troubleshooting, all IT backup and data recovery strategies, local PC imaging, installation, and repair. Supervise 10 staff associates. Objectives successfully implemented include:• Build out of 100 seat call center in Cincinnati, OH• Migration of 30 NT and 2000 server environments to Active Directory over 3 data centers• Consolidation of 3 data centers into 2 over a 6 month timeframe• Implementation and migration of 1000+ users from Notes to Microsoft Exchange 5.0• Microsoft Exchange migration from 5.0 to 5.5• Microsoft Exchange migration from 5.5 to 2000• Build out and configuration of 7 satellite office locations in a four state area• Successfully lead and implemented program to implement hardware and software compliance initiative for the firm

Responsible for the residential customer base (20,000) in the Columbus Metropolitan area. Build out satellite offices in four locations to allow for extended market growth. Implemented extended weekend hours, fully traceable payment methodology to mitigate company risk from internal theft. Functional areas of responsibility included all personal user billing disputes, advertising budget of $150K per year, managing and scheduling of up to 30 staff associates with-in the five Columbus locations, interviewing and hiring process, yearly compensation planning, yearly employee appreciation events.Previously served as Inside Sales Manager – Arch Wireless (1994 – 1996), Collections Manager – Arch Wireless (1992 – 1994)