Mitchell Hibbs Email & Phone Number

New York, Us

Responsible for all aspects of security within the Symphony organization including governance and compliance, security architecture, and security operations of Symphony's Amazon Web Services (AWS) and Google Cloud (GCP) estates. We secure and monitor the trusted collaboration platform utilized by the largest financial institutions in the world.

Santa Cruz, California, Us

Leads a global organization responsible for all aspects of enterprise security for the combined Plantronics & Polycom organizations following the Plantronics acquisition. Responsibilities include incident response, security engineering and operations, forensics, and risk management.

San Jose, California, Us

Leads a global organization responsible for all aspects of Polycom's internal corporate security including incident response, security engineering and operations, forensics, and risk management.Transitioned the organization to a managed security service provider achieving access to specialized resources, configuration assistance, and benefits of scale regarding indicators of compromise.Rearchitected the Incident Response program to improve capabilities, consistency, and alignment with GDPR mandates. Performed a security program maturity assessment benchmarked to NIST and ISO. Results were used to establish a multi-year security strategy based on identified gaps and desired target maturity levels.

Round Rock, Texas, Us

Responsible for leading a global organization of application, network, and product security consultants.Organization oversight included Dell’s secure development lifecycle, product and application architecture and code reviews, security awareness and training, and vendor security risk management.Spearheaded the rollout of Dell’s first enterprise wide secure development lifecycle program based on Open SAMM. The program maintains governance over internal application and infrastructure development as well as external commercial product development.Served as the lead security resource for the IT integration activities associated with the Dell and EMC merger.

Round Rock, Texas, Us

Responsible for leading a global organization of technical architects and engineers located throughout the US, EMEA, and APJOrganization oversight encompassed the engineering and operations functions of Network Security, Client Security, Cryptography, Logging & Monitoring and Identity & Directory Services.Responsible for managing an annual technology acquisition and renewal budget of US $15M.Supervised the network security integration of 20+ disparate acquisition company environments.

Round Rock, Texas, Us

Responsible for leading a global organization of compliance and risk professionals located throughout the US, EMEA, and APJ.Organization oversight included PCI, SOX, IT risk management, IT policies and standards, internal control self-assessments, and Federal compliance.Responsible for identifying risks and mitigation, establishing and maintaining control frameworks and associated policies and standards, assessing the design of IT processes, testing processes and related controls, and identifying exceptions and managing them to resolution. Architected and supervised Dell’s global effort to isolate payment card processing systems into designated network segments to significantly reduced PCI assessment scope.

Round Rock, Texas, Us

Responsible for establishing and maintaining a formal Payment Card Industry (PCI) compliance program for the company.Supervised remediation activities necessary to achieve a state of compliance and authored and submitted Dell’s first passing Report on Compliance.Managed a team of certified Internal Security Assessors performing Dell’s PCI self-assessment of compliance. The approach was novel for a Tier 1 merchant who is typically required to utilize third-party Qualified Security Assessors. The program resulted in more consistency in year over year audits as well as significant annual cost savings.

Round Rock, Texas, Us

Responsible for establishing and maintaining a formal Sarbanes-Oxley (SOX) compliance program for the global IT organization following a year that experienced a 100% failure rate in IT general controls.Implemented and operationalized a formal control framework based on industry standards (COBIT) and established SEC and PCAOB guidance.Supervised management and external auditor testing of the IT general controls and any associated remediation activities.Maintained organization compliance with no IT related significant deficiencies or material weaknesses in financial reporting under my leadership.

Menlo Park, California, Us

Project Manager responsible for Sarbanes-Oxley (SOX) compliance engagements for numerous clients across a variety of industries (retail, insurance, oil and gas, and airline services). Responsibilities included business process documentation, key controls identification, control testing, and coordination of remediation activities. Extensive experience managing relationships with third-party auditors to formally validate SOX compliance. Served as the Program Management Office on a time and attendance software implementation for a multi-national specialty retailer. Responsibilities included facilitating multi-department requirement workshops, developing and documenting functional requirements, developing and documenting technical requirements, and strategic planning related to scope determination and application rollout.

Performed a Health Insurance Portability and Accountability Act (HIPAA) assessments for numerous healthcare clients to identify areas of noncompliance with the regulation requirements. Responsibilities included conducting over 70 interviews with the client, reviewing over 50 organizational processes and policies, and developing a gap report and implementation action plans for the client to help them identify and remediate focus areas for HIPAA compliance.Designed and developed an application for a large healthcare system’s fund-raising foundation to track information relevant to their fund accounting system. Responsibilities included the design and development of a MS Access interface to a MS SQL Server database, and included Cold Fusion based web reporting. Additional responsibilities included developing user and technical documentation for the application and training client personnel on the maintenance and use of these systems.

Mpa, Bba, Accounting & Information Technology

Executive Leadership Program