Chief Information Officer

Julia M. Bondra

*** ****** ****

Lexington, KY **515

Cell: 859-***-****

Email: adrxza@r.postjobfree.com

SUMMARY

An experienced Chief Information Officer (CIO) Technology Professional with greater than 25 years of designing and implementing strategies governing information and cyber security, cloud deployment, resiliency, as well as inherent and residual risk quantification and exposure as the cyber threat landscape rapidly expands. Designed and led the provisioning of layered control environments to prevent, detect, and/or mitigate organizational disruptions, incidents, and breaches.

Gained distinct recognition as a thought leader within the technical and financial services industry by multiple examining agencies, lead global fintech, processing, and payment executive management teams as well as prominent external audit & consulting firms. Presently seeking a change of position to expand scope and agility responsibilities in response to the dynamic and exponentially evolving cyber risk landscape. Seeking leadership and strategy opportunities to related but not limited to risk and threat management, cyber security, resiliency, and cloud deployment/service models. I will leverage my audit, consulting, technical, and CIO leadership experience and interoperability to provide diverse skills accompanied by a transparent and strong work ethic.

STRENGTHS

Energized by Challenges and Change Advanced Cyber Skills and Expertise Respected & Transparent Leader Visionary & Strategist Disciplined & Deadline Driven Thought Leader

Collaboration/Team Building Agility and Rapid Response Strong Problem-Solving Skills Strong technical infrastructure skills STRATEGY & LEADERSHIP ACCOMPLISHMENTS

Expertise and proven experience in adopting standards pursuant to the National Institute of Standards and Technology (NIST) Control Objectives for Information and Related Technologies

(COBIT), Financial Services Information Sharing and Analysis Center (FS-ISAC), Basel Committee on Baking Supervision (BCBS), Committee of Sponsoring Organizations (COSO), Standardized Information Gathering (SIG), and FFIEC Cloud Computing, Vendor Management, Information Security, BCM, Change Management, and other regulatory requirements. Recently concluded a three-year term as Chair of the Fiserv Large Bank Division Signature Strategic Direction Committee consisting of 15 national and regional banks to provide forward- thinking solutions. Led and planned content for quarterly meetings which included members of 1

the Fiserv executive team.

Lead multiple enterprise core conversions to Fiserv Signature Large Bank Solution and deployed best-of-breed and leading technologies. Managed multiple Fiserv digital, payment, and other customer-facing solutions.

Advanced knowledge of cyber security preparedness assessments and ensuring alignment of industry best practice processes such as threat hunting, intelligence, logging, concatenation, correlation, real and near time alerting as well as the establishment of sustainable and sound control environments.

Advanced knowledge and expertise in the design and implementation of preventative, detective, and corrective controls governing applications, infrastructure, cyber, perimeter, endpoint, and network segmentation. Designed measurable Key Risk Indicators to ensure alignment with BOD risk appetite, strategic goals, and capital and operating expense governance.

A strategic leader who has directed numerous response and rapid remediation efforts to thwart well-orchestrated and highly complex nefarious attempts to breach the confidentiality, integrity, and availability of financial institution assets. Advanced knowledge and extensive experience in cloud deployment and service models. Evaluated and provisioned mission-critical services via AWS and Azure as well as hybrid and private cloud solutions.

Advanced knowledge of Enterprise Risk Management Independence and the three lines of defense and developed strategies to integrate Information Security and Technology Operations within the ERM Governance Framework.

Extensive experience and proven strong third-party management strategies commencing with vendor evaluation methodologies, contract provisions with requisite terms and conditions, and ongoing due diligence through review of SOC, SIG, Cyber Preparedness, Resiliency, Regulatory, Legal, and other factors.

Extensive experience in digital channel integration and authentication, SDLC, directing large- scale conversions, reducing total cost of ownership, and automation tools reducing expense. PROFESSIONAL OVERVIEW

Lead a highly competent team including the CISO, CTO, Application Development Lead, Business Intelligence Data Scientist, Data Governance, Infrastructure, Cloud Strategist, BCM Replication and Resiliency, Network, Desktop, and End User Support, Core, Digital, Branch Platform Performance, and Oversight. Consistently obtain exemplary exam, testing and audit reviews, penetration, internal threat, and infrastructure hygiene reports performed frequently by a prominent third party.

Developed and implemented an enterprise cloud deployment and service model strategy to 2

significantly reduce the total cost of ownership while provisioning a secure and scalable resource solution with on-demand expansion capacity Developed a rolling twelve-month advanced cyber-security risk identification and mitigation strategy and mapped results to a monthly cyber dashboard to continually inform the Board of Directors of the present threat landscape, sophistication, and evolving attack vectors, and the effectiveness and continued augmentation of controls. Meets monthly and authored multiple BOD-approved organizational policies including but not limited to Cyber/Information Security, Digital Channels, Vendor Management, BCM, End User Expectations, Change, Project, Asset Lifecycle, Mobile Device, and Remote Management. Developed and continually enhance multiple risk assessments including HIPPA, PCI, GLBA, Cyber Preparedness, Digital Authentication, Cloud, Fedline, and relevant infrastructure, resiliency, mission-critical business and system impact analyses. Developed and implemented a comprehensive technology vendor management strategy to reduce the total cost of ownership, leverage emerging technologies, and govern service level commitments and key contractual obligations. Contract negotiation and renewals yielding fee reductions in excess of $5,000,000.

PROFESSIONAL EXPERIENCE

CENTRAL BANK & TRUST, Lexington KY

02/2002 to present

Executive Vice President, Chief Information Officer Responsible for technical and operational strategic planning, vendor management, cyber security threat management, system development lifecycle processes, cloud assessment and deployment models, incident response, business resiliency and disaster recovery programs, technology enterprise risk management, organizational project management, operating and capital budgeting and provides leadership and direction to multiple departments. Leads all aspects of technology and operations including vendor and asset lifecycle management, infrastructure, security, application development, digital, data governance and analytics, wealth management, investments, insurance, change management, and other critical operations. S.R. SNODGRASS AUDIT & CONSULTING, PITTSBURGH PA

11/2000 to 02/2002

Director – Information Systems Audit & Consulting

Led the coordination and implementation of Information System audit and consulting activities for 50+ clients. Performed research, analysis, report, and plan development for technology infrastructure assessments, operational efficiency and staffing assessments, system implementations, network operations, and penetration and intrusion tests. F.N.B. CORP., Hermitage PA

06/1995 to 11/2000

VP Corporate Electronic Banking

3

Senior Systems Analyst

Information Systems Audit Manager

QUAKER STATE CORP., Oil City PA

04/1988 to 06/1995

Senior Information Systems and General Control Auditor Defined Benefit Hourly and Salary Pension Plan Corporate Actuary EDUCATION

Bachelor of Science: Mathematics/Actuarial Science, Clarion University Certified Information Systems Audit - 1996

4

Contact this candidate