Mary Forby Email & Phone Number

Saint Paul, Mn, Us

Minnetonka, Mn, Us

- Plan, coordinate, execute, achieve and maintain global PCI/DSS and SOC 1 & 2 compliance.- Work closely with global technology and business teams to identify and clarify requirements for compliance audits.- Assist cross-functional teams in performing reviews and tests of internal controls to ensure that existing systems are operating as designed and that they contain adequate controls.- Coordination of interviews and data collection/evidence for use by external auditors and QSA.- Advises and supports the implementation of internal controls to ensure company, employees, customers and vendors are and remain compliant.- Advise the business on compliance, risk, audit questions and concerns.- Assist with various information security questionnaires and assessments.

Minnetonka, Mn, Us

- Managed a team of local and international resources that were responsible for daily endpoint support, management, administration, patching, MSO365, servers, monitoring & incident response, supporting commerce platforms and the company worldwide. Provided day-to-day leadership to the team & ensured the activities of the department aligned with business requirements and expectations.- Managed and executed global change management processes, including tools, weekly change advisory board meeting, maintained change schedule, freezes and monthly maintenance by interfacing with other process/service owners and management.- Crisis Management team lead for global preparation before, during and after Covid19 pandemic as part of disaster recovery and business continuity responsibilities. - Project management coordination, implementation and support for I.T. related projects within my team and with various other internal and external business partners.- Procurement of technology hardware, software, contract negotiation, administration, implementation and renewals.

Minnetonka, Mn, Us

• Perform standard Risk, BCP and BIA practices, along with a governance role to insure that Disaster Recovery systems are maintained.• Execute risk analysis for business functional areas to identify points of vulnerability. • Complete annual Business Impact Analysis across multiple global commerce platform business services and update the BIA and BCP plans for each business entity and corporate.• Business process mapping across multiple, highly integrated commerce platforms and business services.• Enforce governance model around testing, documenting and enhancing disaster recovery capabilities. • Engage with Engineering, Operations & Development teams to insure that disaster recovery is incorporated into design. • Lead crisis management team by implementing, updating, practicing and maintaining emergency response procedures.

Minnetonka, Mn, Us

• Manage IT regulatory commitments, ensuring no significant or material control deficiencies exist according to Sarbanes Oxley and compliance to PCI standards.• Develop and maintain policy and procedures to assess, monitor, report, escalate and remediate IT risk, security and compliance related issues. • Work collaboratively with internal auditing, corporate risk management and various technical teams in the design and implementation of risk governance practices for IT.• Lead cross-functional teams in performing reviews and tests of IT internal controls to ensure that existing IT systems are operating as designed and that they contain adequate controls.• Proactively promote enhancement of technology-related internal controls awareness and training across IT and business units.• Monitor and analyze technology risk trends, recommends appropriate IT policies, procedures and practices to strengthen internal operations.• Direct IT functional teams in the development, implementation, monitoring and reporting of control processes, documentation and compliance routines. • Coordinate the IT component of both internal and external audits as well annual PCI compliance standards.

Eagan, Mn, Us

• Plan, execute, coordinate, achieve and maintain global PCI/DSS and SOC Compliance.• Monitor PCI and SOC platforms, policies, procedures, documentation, software, hardware and diagrams to insure certification requirements are being met and certification maintained. • Develop and coordinate I.T. compliance and audit programs including information security requirements needed to meet SOX, PCI, ISO, SOC2 & 3, SAS70 compliance and client audits.• Work closely with global technology and business teams to identify and clarify requirements for Information Security regulatory compliance and outstanding audit findings.• Assist, advise, guide and communicate the information security/privacy needs and requirements within global technology and business groups.• Manage and support with the development of security and privacy strategy.• Provide technical, procedural and process guidance to the sales and customer support teams for client audits. • Review, update and deliver required information security policies, procedures and educational materials supporting Stream corporate offices and call centers to insure risk management.

Plymouth, Mn, Us

Manage 7x24x365 Ops/Data Center, Wintel/Unix/AS400/SAN Server Systems, WAN/LAN, Desktop, Helpdesk, IT Procurement, Telecom, Disaster Recovery/Business Continuity, SOX & PCI compliance.• Provide day-to-day leadership to the IT Infrastructure organization & ensure the activities of the department are aligned with the business requirements and expectations.• Collaborate with IT & business management to identify & implement the appropriate level of technology to address the needs of the business & its clients (both short & long term) while maintaining IT expenses.• Create the IT Infrastructure strategy to support business operations & managing the implementation of the appropriate projects to accomplish this strategy.• Effectively lead IT Infrastructure department personnel & manage departmental spending including expense & capital items.• Manage operational tasks & strategic projects while balancing the priorities of the business.• PCI & SOX audit owner. Update & maintain all PCI & IT General Controls, policies & procedures for annual audits.• Develop & manage IT Disaster Recovery Plan, test it & lead development of a Corporate Business Continuity Plan that is consistent with the needs of the business & its customers.• Develop key performance metrics for critical IT functions such as Help Desk stats, network availability & performance, systems availability & performance, service requests, hardware & software utilization reporting, database utilization reporting.• Manage all production technology vendors & managed service providers. • Responsible for the management and escalation of any interruption of IT services, dissemination of problem status throughout the organization and coordination with other IT and business management to ensure timely problem resolution.• Developed and managed all core Infrastructure activities including problem and change management; database management; backup and recovery procedures; hardware & software tracking & management.

Plymouth, Mn, Us

• Executed project that brought company to PCI/DSS Compliance. Continually monitored PCI platforms, policies, procedures, hardware and diagrams to insure certification requirements were met and full compliance maintained. • I.T. owner for annual Sarbanes-Oxley internal/external audits. Updated and maintained I.T. general controls.• Lead and coordinate annual multi-platform disaster recovery tests and update all departmental DR plans bi-annually.• Develop, implement, and maintain policies, procedures, standards, and practices necessary to design, develop, test, install, and maintain application software portfolio, technology hardware infrastructure, and data center operations• Monitor management disciplines to meet corporate operational service level agreements; identify areas of business process improvement, and maintain high level of customer service responsiveness.• Responsible for all offsite tape and paper records management, policies, procedures and educating users on our compliance requirements and annual audits of both record sets. • Plan, execute and maintain Compliance, Disaster Recovery and Records/Media Retention annual expense and capital budgets.

Coraopolis, Pa, Us

Responsible for all aspects of Information Technology at corporate office and 70 stores nationwide.• Develop, plan and execute long/short-term technology strategies and set overall direction of internal business systems for the entire organization and stores. Lead IT Steering Committee for all technology discovery, review, planning and implementation.• Partner with executive management team on strategic planning to establish priorities aligned with corporate initiatives.• Develop and implement information technology policies, procedures, processes and strategy.• Establish annual operating budget for IT department and consult with other departments for their budgetary technology plans. • Coach, mentor and develop staff members technically and professionally to promote efficient delivery of information technology services. Set and provide direction on day to day management of information technology operations and projects.• Ensure hardware, software and data integrity to meet SOX and PCI compliance requirements internally and with all third party vendors.• Research and recommend new computer based technology solutions for future planning and implementation in alignment with strategic goals and oversee planning and implementation of all business information systems for all departments and stores.• Negotiated with all I.T. vendors to ensure cost-effective purchasing decisions.

Management of 7x24x365 multi-platform Operations Center, Desktop, Server Systems, Help Desk and IT Procurement. Ten direct reports, 2 Network Server Administrators and 8 Technical Support Analysts.• Implemented business models, work plans and best practices to improve overall productivity, functionality and direction for departments to incorporate company wide strategic plans. • Identified Crisis Management weaknesses and needs which lead to developing and implementing full scale production escalation policies, procedures and processes, improving overall Severity One crisis management and root cause analysis.• Developed system reporting metric scorecards to track and analyze outages and service interruptions against SLA’s.• Drastically improved Help Desk and Server first-call resolution, response time, productivity and customer service for end users.• Built very strong reliable stable customer focused teams through coaching, mentoring, training, recruitment and vision.• Identified unfavorable hardware spending, lowered costs and spending by creating options that provided the same support and tools needed by business units.

Dallas, Tx, Us

Director of Production Services Accountable for enterprise wide production services delivery, 24x7x365 availability & reliability with 99.9% up time service level requirement. Drove the development, approval & implementation of long-range strategies for all areas of responsibility.Ownership & coordination of all IT audits to include SAS70, Sarbanes Oxley, Internal & External Yearly Audits.Process owner of internal Severity One Crisis Management incidents, outages, root cause analysis & resolution.Member of IT Steering Committee & IT Priority Committee - participated in the development & implementation of long range technical strategies, consulted on tactical & analytical issues, projects, redundancy and future infrastructure changes.Managed vendor relations, contract negotiations, purchases, maintenance, and support for IBM, CA, DELL and Microsoft.Developed, monitored and maintained budgets for six cost centers with total budgetary dollars of over 6 million dollars.Director of Infrastructure Managed technical support organization supporting all computing platforms.Directed the development, approval and implementation of long-range strategies for all areas of responsibility.Developed, managed and monitored department budgets for 15 cost centers with total budget dollars of over 10 million dollars. Identified and recommended areas for operational change to bring about greater efficiency.Member of IT Steering Committee and IT Priority CommitteeDefined, authored and published service level agreements for IT, business units and customers.Project Manager for implementation of redundant infrastructure to eliminate single points of failure.Leveraged latest technology to insure transaction based processing flowed at the highest most efficient & effective levels.Manager Technical Services – Server Systems Manage staff of 5 who supported Client Server platforms of Novell/NT/Win2K/Unix/RS6000/AIX Platforms.

IT Support Manager - Promoted to Senior Level Manager of local and remote sites; supported 1200+ users with 18 Technical support associates, 3 project managers and a business analyst.Server Manager - Managed 18 Server Administrators in 4 locations with 250 servers nationwide.

Plano, Texas, Us

Distributor - Fine Jewelry Diamond Division

Numerous positions within the Information Services Department during my tenure with the company which included I.S. Manager, Client Services Supervisor, Project Management, Training Coordinator, Telecommunications Coordinator and PC Technician.