John Hartness Email & Phone Number

Bloomington, Il, Us

Bloomington, Il, Us

Bloomington, Illinois, Us

Reporting to the Chief Privacy Officer, I lead a 32-person function responsible for supporting and maintaining State Farm’s companywide Privacy Program.➝ Role Focus- I provide strategic advice and guidance to the Chief Privacy Official, and other senior executives, for companywide Privacy compliance initiatives, functions, and programs while leading the organization’s Privacy Program.- Additionally, I chair the organization’s Information Security and Privacy review group which is charged with evaluating the adequacy and completeness of information security and privacy risk management plans created by business areas. - In both roles, I build consistent trust around regulatory requirements from strategy to execution as I lead, mentor, and train cross-functional teams in a matrixed environment to achieve operational compliance. ➝Key Achievements - Directed, architected, and implemented a multi-year effort to enable organizational compliance with the California Consumer Privacy Act (CCPA), and the subsequent California Privacy Rights Act (CPRA)- Directed, architected, and implemented a multi-year effort to create an enterprise complaint and feedback program to enable trend spotting and incident correlation across business lines and sales channels- Directed, architected, and implemented a multi-year effort to create an inventory of enterprise assets, both tangible and intangible, to support the organizations risk management and assessment processes -Directed and implemented project to enable Data Loss Prevention capabilities companywide. This included approximately 200,000 workstations and 130,000 users.

Bloomington, Illinois, Us

Reported to State Farm’s Chief Information Security Officer as part of the initial leadership team for the newly created Office of Information Security and IT Risk and Compliance (OISRC). Responsible for establishing and leading IT Compliance practices companywide.

Bloomington, Illinois, Us

Reported to State Farm Insurance’s Chief Information Security and Privacy Officer, responsible for providing leadership, support, and vision for assigned companywide compliance initiatives, activities, and programs. Assigned to provide subject matter expertise and support to the following companywide efforts: -Development of an Office of Vendor Management -Development of an Office of Information Security and IT Risk and Compliance -Development of a project plan for a companywide compliance initiative to create a comprehensive inventory of all customer NPI companywide

Bloomington, Illinois, Us

Reported to Chief Risk and Compliance Officer, served as the Chief Security Officer and led a 52-person department, supporting Bank's risk and compliance initiatives.➝ Role Focus I provided leadership and direction for all Bank’s Operational Risk programs, including Information and Physical Security, Vendor Management, Business Continuity and Disaster Recovery, Loss Prevention (including BSA/AML monitoring) and Investigations. ➝ Key Achievements- Optimized allocation of $ 5.2 M budget by strategically aligning security budget with business goals, maximizing return on security investments. - Ensured safe and sound bank operations by formalizing the Bank’s Operational Risk Governance structure. - Boosted operational risk management and governance by developing operational risk scorecards that contain performance metrics, allowing leaders to analyze threats to productivity. - Saved company $ 175 K in direct expenses by directing the insourcing of Credit Card investigations from third-party vendors, increasing average recovery.

Bloomington, Illinois, Us

Reported to Chief Operations Officer, served as Chief Security Officer and led 120 cross-functional employees in creating and maintaining a productive and compliant environment. I operated $ 9.8 M department budget and an outsourced technology service and project budget of $ 27 million.➝ Role Focus Provided strategic direction and oversight for the “Bank’s Technology Office”, “Customer Experience Solution Center” (CESC), “Operational Support Group”, and Risk Management Programs, under the direction of COO.➝ Key Achievements• Saved company $1.2 M in the first year, by spearheading the development of first “Business & Technology Solution Center” (BTSC), merging the resources of the “Bank’s Technology Office” with the “Systems Solution Center.”• Improved customer banking experience by introducing the first “Customer Experience Solutions Center”, including development of charter, staffing plans, and operational budget. • Merged “Vendor Management Office” (VMO) and “Service Provider Oversight Program” (SPOP) into one VMO, minimizing internal customer confusion and creating consistent management of risk.

Reported to Vice-president of Finance, served as Bank’s Chief Security and BSA/AML Officer, responsible for the development, execution, oversight, administration, and monitoring of all Security and Compliance related activities. Led a 35 person department with a $3.5 million department budget and an outsourced compliance and risk management service budget of $11.1 million.

Reported to Vice-president of Operations, providing direction and oversight of all segments of State Farm Bank’s Security Program (includes physical, technical, personnel, procedural and electronic security measures) in a matrix environment as well as serving as Board appointed Bank Security Officer and BSA/AML Officer.

Recruited by Vice-president of Operations into newly created position to consult with the various Bank programs to review, monitor, and recommend processes for fraud, risk management, security, and government reporting. Successfully created framework for future Bank Security Department responsibilities, including all unit responsibilities and all job descriptions as well as recruited and assembled management team needed to build and implement Bank Security Department

Bloomington, Illinois, Us

• Provided investigative analysis and research for all types of fidelity investigations• Provided audit services for claim-related operations and processes• Performed risk assessments and conducted customer interviews• Performed audit tests and identified control weaknesses• Developed recommendations and reported results to operations management

Bloomington, Illinois, Us

• Investigated, evaluated, negotiated, and settled claims• Determined legal liability and damages to persons and property• Worked with attorneys and medical professionals• Contacted parties by phone, mail, or person• Secured releases

B.S., Education

Security Executive Development Program

Aba National Compliance School

Aba Graduate School Of Compliance Management