Mitchell Hall PMP, MCSD, CISM

Experience

• 

  Metro Information Services

  Sept 1991 - Aug 1997

  Senior Programmer

  I joined Metro Information Services as a senior programmer and worked at multiple clients providing design and implementation services.Responsibilities:• Developed and maintained medical billing applications, inventory applications, rail shipment tracking• Lead the migration of single user Access based application to multiuser SQL server based solution.

• 

  VHDA

  Jan 1996 - Jan 2002

  Project Manager

  I joined VHDA as a contractor implementing Visual Basic and SQL server applications. I then took the role of project manager, leading web development activities using ASP.Net. I assisted the organization in converting legacy applications to modern technology.Responsibilities:• Managed projects using waterfall methodology and tracked projects using Microsoft Project.• Lead the design and implementation of client server and web applications.• Managed staff of 4-7 employees and contractors. • Specific products included: Single Family Reservations, HUD 50058 processing, database management utilities, digital signatures for document management, extranet security system, web content management and document management. Show less

• 

  David Lerner Associates, inc.

  Mar 2003 - Sept 2004

  Manager Software Development

  I began at David Lerner as a development lead and ascended the position of Manager of Software development within 6 months. I assisted the company in the migration from an AS400 environment to a .Net and SQL server shop. I lead the team in the analysis, design, development and implementation of core business functionality in the new environments.Responsibilities:• Defined scope, gathered requirements and developed project specifications according to business needs. • Managed application delivery using a waterfall methodology using Microsoft Project.• Designed architecture and directed development for client server and web based .NET applications.• Implemented database designs and managed SQL Server databases. • Managed staff of 4 developers, 2 network analysts and 2 helpdesk associates. • Managed engagements with external vendors who supplied critical processing for monthly and year end reporting needs. • Specific products included: interfaces to ADP processing system, compliance query system, bond inventory system and security infrastructure. Show less

• 

  Microsoft

  Sept 2004 - Oct 2014

  Senior Program Manager

  Researched feature set and collaborated with other program managers during the requirements gathering phase. Created scope and requirements documentation for features within Microsoft’s Office 365 group. Acted as product owner and provided project management function throughout the development process. Wrote user stories and managed product backlog. Tracked project status and managed adherence to schedule. Ensured quality and performance objectives were met. Major achievements included:• Conducted multiple product presentations at Microsoft Tech Ed conference.• Release of reporting framework for Exchange Online• Release of Forefront AV scanning solution for Small business server• Release of multiple versions of Microsoft Forefront scanning feature for Microsoft Exchange Show less

• 

  Clever Devices

  Oct 2014 - now

  • Core member of vCISO team, chartered with building the corporate cybersecurity program• Tailored corporate cybersecurity policies to support internal business processes• Audited cybersecurity controls in preparation for ISO 27001 and SOC 2 assessments• Participated in corporate risk assessments using NIST CSF framework• Responded to multiple customer cybersecurity questionnaires• Authored Risk Assessment Report for computer system embedded in transit buses• Created threat and vulnerability assessments by analyzing vehicle system diagram and by understanding the system use cases• Created risk assessment based on criticality and attack feasibility ratings• Developed cyber security program within engineering group• Developed Secure Development Life Cycle (SDLC) including threat modeling, static code analysis (SAST), software composition analysis (SCA), CIS Benchmark and vulnerability scanning• Managed a cyber security training curriculum used to ensure developers are trained in secure development practices• Developed a Technical Service Bulletin (TSB) process which documents critical vulnerabilities and prescribes mitigation steps. This enables project teams to communicate with affected Show less I direct the development and delivery of Clever Device’s scheduling and Vehicle Maintenance products. I work with the engineering managers and product owners on the design and scheduling of development activities. In addition to software development, I am the point of contact for five of Clever Devices major customer system deliveries. I interact with the project teams to ensure the software meets the customers’ needs and is of high quality. I help bridge the gap between the project teams and engineering, ensuring a smooth rollout of the projects. I took the role of software development manager to help the company with a significant product delivery challenge we were having. I managed the team through significant issues with functionality and quality. Subsequent to the release of this product I was promoted to director within the engineering group. Major achievements include:• Directed major software releases to five major customers in the past year• Developed software security policy and integration into the SDLC• Developed performance and measurement metrics to measure engineer productivity Show less

  • Director of Engineering - Cyber Security Managment

    Sept 2020 - now

  • Director Of Engineering

    Oct 2014 - Oct 2020