John Phelps

Education: Master of Business Administration (MBA)

Emphasis in Information Management

Arizona State University

2014 : 2016

BS

Computer Information Systems

Northern Arizona University

1999 : 2003



Cisco Network Academy

South Mountain Community College

2012 : 2012

Experience: -Lead, coach, and mentor team of eight highly skilled information security and risk management professionals.

-Manage the scheduling, assignment, and execution of over 700 information security risk and control assessments of third parties, cloud providers, external network connections, and technology projects per year.

-Collaborate with senior business leadership to identify and optimize mitigation of risks in alignment with business objectives.

-Develop and update control assessment, reporting, and KPI/KRI framework to assess and communicate information security risk.

2020 : Present

U.S. Bank

Vice President, Information Security

-Designed, implemented, and led processes to assess, communicate, and track high-risk vulnerabilities from vulnerability scanning, application testing, penetration testing, tabletop exercises, and first-line self assessment.

-Communicated status of ongoing risks to senior company leadership via presentation and KRI/KPI dashboards.

-Supervised and mentored team of three information security specialists.

2018 : 2020

Northern Trust Corporation

Vice President, Team Lead, Information Security Risk Management

-Performed third-party information security risk assessments

-Created risk assessment reports to communicate both technical and business risk to company

decision makers.

-Led presentations to company leaders on technology and information security risks associated with

Northern Trust’s vendors.

2016 : 2018

Northern Trust Corporation

Second Vice President, Senior Information Technology Risk Consultant

-Designed, deployed, and managed server, storage, and network systems for FIS’s Infrastructure As A Service (IAAS) cloud platform for financial institutions offering a high level of security, availability, and value to customers.

-Managed the design and implementation of client firewall, encryption, email security, and anti-virus systems for customer cloud environments.

2010 : 2013

FIS

Senior Network Engineer

-Completed redesign and implementation of US headquarters and wind farm site data networks, improving uptime and increasing bandwidth to allow for the sharing of data and engineering plans.

-Designed and maintained firewall and VPN systems to protect company data at office and construction site locations.

2008 : 2010

Renewable Energy Systems

Network Engineer

Company: U.S. Bank

Years of Experience: 15