Gary A. Johnson *** SW Eckman Street, McMinnville OR 97128
*********@*****.***
https:/www.linkedin.com/in/gary-johnson-ciso
Professional Summary
Results-driven and visionary technology executive with over a decade of experience leading strategic IT initiatives for the State of Oregon. Proven track record in driving innovation, enhancing security measures, and championing digital transformation to optimize government services. Adept at developing and executing comprehensive IT governance frameworks, collaborating with cross-functional teams, and leading organizational modernization efforts. Seeking the position of Vice President of Information Technology to leverage expertise in strategic leadership, team development, and technology modernization. Experience
SEPTEMBER 2022 – PRESENT
Assistant State Chief Information Officer / The State of Oregon – Salem, OR Direct strategic planning, development, implementation, and management of IT initiatives for multiple State of Oregon agencies, aligning seamlessly with the state's overarching goals and priorities. Emphasize driving innovation, enhancing security measures, and championing digital transformation to elevate government services, enrich the citizen experience, and optimize operational efficiencies. Collaborate with key stakeholders, overseeing the long-term roadmap, and meticulously defining and executing initiatives that increase the value of IT assets while ensuring alignment with organizational objectives.
• Strategic Technology Leadership:
o Spearheaded comprehensive IT governance and risk management initiatives across multiple State of Oregon agencies, ensuring alignment with statewide objectives. o Led innovation, security enhancement, and digital transformation initiatives to elevate government services, amplify citizen engagement, and optimize operational efficiencies.
• Cross-functional Collaboration:
o Built trusted relationships with agency partners to promote a modernization vision for Oregon, focusing on people, processes, and technology.
o Collaborated with agency leadership and IT resources to develop multi-year modernization strategies, resulting in 80% of agencies adopting action plans within the first year.
• IT Governance and Resource Allocation:
o Developed and implemented IT governance processes and frameworks to align IT initiatives with mission/business objectives, comply with policies and regulations, and optimize IT spending. o Oversaw IT operations and service delivery across state agencies, ensuring reliability, security, and alignment with business needs.
• Operational Planning and Execution:
o Led operational and strategic planning for the enterprise application department, encompassing business requirements, project planning, performance management, and resource deployment. o Proactively applied knowledge of software trends and best practices to ensure technology infrastructure and capabilities were efficient and effective.
• Innovative Solutions:
o Drove strong partnerships across the organization to understand business goals and linked them to the implementation of enterprise system components. 2
• Team Leadership:
o Built high-performing technology teams that worked collaboratively across the enterprise, fostering a culture of innovation, critical thinking, flexibility, and adaptability.
• Strategic Design and Development:
o Worked with key stakeholders within the team and partner organizations to drive annual operational planning.
• Communication and Engagement:
o Owned writing documents and updates related to various aspects of the business, such as business reviews, goals, internal communications, and other org-wide topics. o Managed relationships between business stakeholders and the Information Technology department, facilitating project prioritization and resource allocation to meet program objectives.
JULY 2019 – AUGUST 2022
State Chief Information Security Officer / The State of Oregon – Salem, OR Team: 3 Direct & 90 Total – $40.7M Operating Budget. Appointed to a pivotal executive leadership role with substantial visibility, entrusted with steering IT governance and compliance strategies for the Oregon state government, serving a populace of 4M+ residents across 36 counties. Managed a substantial $40M+ operational budget, wielding a $1M signature authority per purchase order and executive branch statutory responsibilities. Delivered visionary leadership, strategic guidance, and state- wide security directives to over 46K employees dispersed across 66 agencies.
• Developed and implemented an all-encompassing statewide IT governance and compliance framework aligned with industry benchmarks, amplifying the state's security posture and resilience. Ensured meticulous adherence to government regulations and industry best practices, culminating in a year devoid of major compliance issues.
o Dramatically reduced threat incidents by 59% (33% YOY decrease) – Improved mean time to detect (MTTD) from days to minutes and reduced mean time to contain (MTTC) from days to hours.
• Led all aspects of the end-to-end process to deliver policies, standards, and guidelines for the state's information security program, including intake, prioritization, proposal development, governance approval, documentation updates, and socialization to stakeholders.
• Promoted IT security across the systems development life cycle by providing a broad range of advisory services on IT security-related issues, partnering with program offices to include security controls early on and across the system development life cycle while building and maintaining strong partnerships with federal and state agencies, private sector organizations, and academic institutions to share information and best practices, and to collaborate on security initiatives. JUNE 2015 – JUNE 2019
Chief Information Officer & Division Administrator / Oregon Department of Revenue / Salem, OR Team: 6 Direct & 200+ Total – $46M Operating Budget. Championed innovative strategies for enterprise development, driving the execution and enhancement of applications critical to the agency. Provided strategic leadership for the Oregon Department of Revenue's IT and PMO division, setting the direction for high-priority transformation projects and inspiring a 200+-member team.
• Led the development and execution of strategic plans, aligning technology initiatives with organizational objectives.
• Concept-to-execution leader of a $72M core system modernization effort, completed within timelines, under budget, and adhering to quality standards.
• Collaborated with business leaders to provide technological solutions supporting strategic initiatives. Financial Services Experience
3
MARCH 2000 – OCTOBER 2008
Senior Technology Manager / Fidelity Investments / Boston, MA Team: 6 Direct & 200+ Total – $46M Operating Budget. As the leader in Software QA Automated Testing, played a pivotal role in strategically shaping Fidelity's technological landscape.
• Establishment of Fidelity's First IT Offshore Team – Collaboration: o Led the establishment of Fidelity’s inaugural IT offshore team in Gurgaon, India, aligning with the
'follow the sun' strategic initiative.
o Strategically addressed a growing backlog in Software QA automated testing, initiating conversations with key stakeholders.
o Navigated complex directives by recruiting and organizing a high-performing team, ensuring clear communication, defined roles, and shared objectives. o Successfully delivered the offshore team on time and under budget, contributing to Fidelity's growth and establishing a new direction.
o Maintained responsibility for hiring, managing, and retaining culturally diverse and geographically dispersed staff, fostering productivity and quality. Key Achievements
• Successfully led IT governance and risk management initiatives, ensuring alignment with statewide
objectives.
• Spearheaded modernization efforts resulting in an 80% adoption rate of action plans within the first year.
• Reduced threat incidents by 59% through the
implementation of a comprehensive statewide
IT governance and compliance framework.
• Concept-to-execution leader of a $72M core
system modernization effort, completed within
timelines, under budget, and meeting quality
standards.
Education + Certifications + Professional Courses
Master of Business Administration (MBA) / Willamette University, Salem, OR Bachelor of Science (BS in Health Administration) / Northeastern University, Boston, MA Additional Training: Global Information Assurance Certification (GIAC) Security Leadership (GSLC); Certified Information Security Manager (CISM); Cybersecurity & Infrastructure Security Agency (CISA) Threat Information Gathering & Election Resources team member; Lean Six Sigma Yellow Belt; ITIL Foundation v2 (certified); Department of Homeland Security Secret Level Clearance; FBI Criminal Justice Information System (CJIS) Certification
Professional Affiliations + Memberships
• Board Co-Chair, Cybersecurity Collaboration Forum • State of Oregon – CIO Council Member-Prior Chair
• Seattle CIO Community Governing Body (Evanta) • Board Member – Oregon Digital Government
• InfraGard member • National Governors Association
• National Association of State CIO (NASCIO)
• Multi-State Information Sharing & Analysis Center
• Women in CyberSecurity (WiCyS)
• Information Systems Audit & Control Association