Mario James Email and Phone Number

• Strategy and Program Development: o IT Vendor Risk Management Program Developed and implemented processes, risk rating and scoring methods, questionnaires, and necessary templates Management of the IT vendor risk management program and underlying processes, documentation, and the various teams who contribute to these processes Execution of IT Governance roles and responsibilities  Designed metrics for program success and areas of improvemento IT Governance Critical Application Assessment Strategy Developed processes and procedures, risk rating and scoring methodology, questionnaires, and reporting templates Developed program 3-year road-map which included and took into account milestones of program maturity  Executed and completed proof of concept assessments with several IT Groups o Strategy Communication and Marketing Presented IT Governance strategy and IT vendor risk management program to IT and executive leadership Presented high-level strategy to implement threat intelligence and vulnerability management program to management Developed communications, announcements, and corporate newsletter articles regarding IT Governance efforts• Audit: o Acting liaison between IT and Internal Audit departmentso Project management of IT Internal Audit projects.  Including working within IT project management processes to build business cases and identifying stakeholders and necessary IT resourceso Management of external audit information gathering  Contacting the necessary IT resources to gather documentation requests • Data Privacy, Security, and Complianceo Collaborated with IT and business resources to complete data mapping process assessmentso Collaborated with Web Marketing and Legal departments to design and implement cookie banners, and post privacy and cookie banner policies to web properties

● Work with the MDOT users through the Remedy Help Desk ticket system● Wrote technical articles for MDOT-DTMB communication team● Responsible for paperwork necessary for LAN and software upgrades and approvals● Workflow process building, testing, and implementing

● Collect, filter, and propagate open source intelligence to MC3 SharePoint site● Building test PC for malware detonation● Data collection on hackers/hacker groups, producing documents with findings● Research and procurement of intelligence documents for private and public organizations

● Managed Power Over Ethernet phone systems, employee workstations, and network printers in offices statewide● Managed enterprise wide computer software and hardware upgrades● Managed computer software and hardware procurements● Established, designed, and implemented a number of Kinexus’ computer laboratories● Assessed and resolved wide variety of helpdesk inquiries quickly and accurately