Mike Hillier Email and Phone Number

•Designed and led Audit's first independent cyber monitoring and investigations program where numerous insider threats were discovered and corrected before risks were realized. Evaluated the effectiveness of same with first and second line risk partners. •Engineered Audit's first application source code assessment program. Then led execution where numerous internet facing vulnerabilities were unearthed and remedied before exploits were exercised.•Chief liaison for encryption compliance directly and indirectly executing reviews for credit card applications (PCI) and its immense interchange network and infrastructure throughout the banks global financial network.•Architected and automated at the scale of the company Audit's first Active Directory and RACF access control measurement program. For the first time Audit began independently assessing its multiple role and discretionary based access review frameworks within the business.•Assessed, deliberated and reported control effectiveness for all aspects of the master data governance, classification and quality assurance programs. •Identified regulatory technology requirements, determine methods to apply or address, then monitored oversight to assure regulators, customers and shareholders its control effectiveness is sustainable.• Effected numinous improvements to enterprise information technology (IT) policies and system baselines. Determined scope and objectives for complex technology audit programs and testing criteria.

• Architect and led onsite inspections for Bank of America's critical suppliers within corporate audit. Provided direct oversight evaluating the effeteness of supply chain compliance with internal Global Information Security. Established than directed oversight of supplier remediation efforts. Directed the reading and redlining of contracts and service level agreements (SLA).•In partnership with Odell International built the application and infrastructure directly supporting the architects, technology, security design, capacity planning and disaster recovery for construction of the Military Medical Complex in Riyadh Saudi Arabia. •General consulting at large performing intrusion and vulnerability assessments. Expert analysis skills to implement countermeasures immediately reducing risk exposure.

•Architect providing the IT security designs for DMZ, intranet and extranets for its international chemical and pharmaceutical corporations. Down-sized and de-merged these complex networks with three fortune 500 companies. •Integrated firewalls, virtual private networks (VPN) and commerce solutions throughout the U.S., Asia, and Europe. •Implemented countermeasures to reduce risk and provided designs for continuous monitoring.•Implemented encryption technologies such as IPSEC, HSM, PGP, SSL, SSH, Secure FTP and VPN. •This included Public Key Infrastructure (PKI) CA design, piloting, implementation and the operational adoption of user, service tokens and computer certificates.

•Preformed network analysis for debugging the performance and capacity of business applications and network infrastructure (DNS, DHCP & VPN) used throughout the utilities wide area network (WAN).•Disseminated innovative expertise in analyzing, diagnosing and resolving complex IT problems without existing guidelines or procedures.•Severed as expert using Ethernet, Token ring, FDDI network packet analyzers for advanced protocol troubleshooting in all layers of the OSI model.

•Designed turnkey network and application solutions for U.S. Government agencies; U.S. District Court, U.S. Attorneys, Bureau of Prisons, FBI and DEA.•Responsible for managing service and support contracts with key relationships in diverse IT implementations while supervising four field engineers.•Doubled hardware sales during first two years and captured 13% of sales in new banking-related business by conducting software training, troubleshooting and consulting services the third year.

•Contractor working in the beltway area of Washington DC on various defense and intelligence efforts.•Maintained a Top Secret government clearance.

•Assigned to the U.S. Army Communication Command at fort L.J. McNair supporting the Military District of Washington (MDW). •Detached to the Pentagon servicing radar, computer, encrypted communication and navigational equipment at the heliport and other metropolitan aircraft landing zones.•One year of duty in Seoul Korea at K16 repairing Identification Friend or Foe surveillance computers and Ground Control Approach radar.•Maintained a secret clearance, honorably discharged, good conduct, overseas and Army service ribbon. Qualified as sharpshooter with M16.