| | | 20,000+ Fresh Resumes Monthly | |
|
|
| | Related Resumes Senior Systems Administrator/Production Operations Engineer Joliet, IL Senior Director, Finance Flossmoor, IL Senior claims examiner Hazel Crest, IL Data Center Senior Network DeKalb, IL Senior Accountant Chicago, IL Loan Officer Senior Genoa, IL Internal Audit, Internal Control, SOX, Operational Risk, and ERM Chicago, IL |
|
Click here or scroll down to respond to this candidateCandidate's Name
EMAIL AVAILABLEmailto:EMAIL AVAILABLE
PHONE NUMBER AVAILABLE
https://LINKEDIN LINK AVAILABLE
Senior IT Audit Leader
Business aligned IT professional with over 20 years of experience developing and implementing controls to achieve overall business goals. Effective IT leader with the ability to build alliances with organizational leaders. Expert in developing and implementing sustainable policies, processes and procedures to establish and maintain compliance. Solid technical experience with the ability to design practical recommendations and solutions for identified risks and exposures. Astute with IT frameworks based on:
Committee of Sponsoring Organization (COSO),
Control Objectives for Information and Related Technologies (COBIT),
International Standards Organization (ISO/IEC 27000), and
National Institute of Standards and Technology (NIST) Cybersecurity.
Strategic Planning & Leadership
Risk Assessment/Impact Analysis
Team Building/Motivation
Project Management
Regulatory Compliance
Effective Communications
Change Agent
IT Governance
Data Analytics
PROFESSIONAL EXPERIENCE
FORTUNE BRANDS HOME & SECURITY (Deerfield, IL) 1997 2017
Fortune Brands Home & Security (FBHS) is a $5 billion company that manufactures trusted brands like Master Lock Security Products, MasterBrand Cabinets, Moen Faucets, Sentry Safes and Therma-Tru Entry Door Systems.
Senior IT Director Security, Compliance, Audit 2016 - 2017
Started in 1997 as a Senior IT Auditor with increasing responsibilities resulting in consistent promotions:
IT Audit Director, 2006 2015
Senior IT Audit Manager, 2003 2006
IT Audit Manager, 2000 2003
IT Audit Field Supervisor, 1998 2000
Senior IT Auditor, 1997 - 1998
Responsibilities
Audit Leadership
Served as liaison to audit committee and IT leadership for controls assessment of all domestic and global IT operations. Responsible for providing formal quarterly reports summarizing status of IT risks and mitigation efforts.
Advised IT leadership on the design and operating effectiveness of implemented controls for addressing short and long term strategies.
Performed IT due diligence for new acquisitions and assisted with integration into existing control environment. As a result, all major acquisitions were SOX IT compliant during their first year of eligibility with no significant deficiencies.
Built collaborative relationships with IT leadership through effective communications and negotiating skills.
Sound hands-on technical background with the ability to identify, manage and ensure corporate-wide IT compliance with Sarbanes-Oxley (SOX), Third party Statement on Standards for Attestation Engagements 16 (SSAE16), Protection of Personal Identifiable Information (PII), Payment Card Industry Data Security Standards (PCI DSS) and FBHS internal IT policies.
Audit Lifecycle
Performed annual and quarterly IT risk assessments in order to develop and adjust the risk-based audit plan. Input included changes within the business, strategic projects, previous audit results, industry trends, emerging technologies and current implemented technology.
Managed the scoping, planning, execution and remediation processes for all IT and integrated audit projects. Where possible, incorporated the use of data analytics to improve the audit efficiency, accuracy and completeness of the audited population/data.
Managed IT projects compliance with approved project plans, implementation methodology and reporting requirements (budgetary, scope, time, resource and quality).
Formally documented and reported issues, risks and mitigation options in a timely manner.
Maintained system and application inventory, business processes and application workflows to help identify high risk areas as part of audit planning process.
Vendor Management
Ensured IT contracts with external vendors complied with internal policies and control requirements, abating company risks. Utilized external resources as needed for specialized skills not available in-house. Collaborated with external auditors when conducting in-depth compliance reviews.
Personnel Management
Managed IT audit professionals with skills development, risk-based audit guidance, performance management, career coaching and retention.
Assisted IT audit personnel on moderate to high complexity, high visibility projects and coach through constructive feedback.
Maintained personal certifications and development of new skills to stay current with audit and technology trends. Platinum Member of Institute of Internal Auditors (IIA) and Information Systems and Control Association (ISACA).
Audit Tools
Hands on experience in the use of audit and security tools: Splunk SEIM, Qualys vulnerability management, Nessus network vulnerability scanning, ACL and Tableau.
Software and Hardware
SAP, Oracle, PeopleSoft, JD Edwards, Friedman Frontier, Unix, Linux, MicroSoft, AS/400 iSeries, VM and Networks.
Accomplishments
Sarbanes Oxley (SOX) Designed and implemented key enterprise IT controls matrix for SOX compliance addressing application access (including segregation of duties), security administration/provisioning, application and infrastructure change management, system implementation and data center operations. Also established testing protocol which included an assessment of the design and operating effectiveness of the key SOX controls.
Segregation of Duties (SOD) - Envisioned, designed and implemented automated tools to replace manual segregation of duties testing to identify inappropriate and excessive access in ERP applications. SOD tools, on average, reduced 4 man weeks of manual testing per operating company to approximately 4 hours. Additional benefits included replacing random sampling with 100% testing of the population resulting in improved overall accuracy.
Cyber Security As a member of the Enterprise Cyber Security Steering Committee, developed audit programs to monitor compliance with project objectives to mitigate cyber threats to the enterprise. Audit program addressed training & awareness, security policies, network segmentation, and real-time monitoring of internal & external traffic.
PCI and PII Assessment Conducted initial assessments of operating companies compliance to PCI Data Security Standards (DSS) and used results as input into requirements for Cyber Security controls definition. Developed internal process for monitoring operating companies ongoing compliance to PCI and PII security standards.
ERP Implementations Monitored compliance to project timelines and budgets while ensuring proper controls were included during implementation for change management, data conversion, security provisioning and segregation of duties. Efforts have resulted in appropriate controls being designed into the standard operating procedures upfront. Projects include Oracle EBS, SAP ECC, PeopleSoft, JD Edwards and Friedman Frontier.
Data Analytics Created tools using Audit Command Language (ACL) and Microsoft Access to assist Financial Auditors with data analysis. Created a repeatable process for continuous fraud auditing of travel & expense reports using ACL.
SYSTEM SOFTWARE ASSOCIATES Chicago, IL, 1992 - 1997
System Software Associates, Inc. (SSA) is a supplier of software for the AS/400 line of midrange computers. SSA's core product line is the Business Planning and Control System (BPCS), a group of integrated software products for the manufacturing, distribution, and financial operations industries.
Senior Systems Analyst Corporate Finance & Corporate MIS
Responsibilities
Liaison to executive staff for planning and implementing automation to address strategic IT and financial initiatives.
Managed application enhancements and new program development for global BPCS financial applications.
Provided end-user support for financial applications across all departments.
Managed AS/400 configuration and security.
INTERNATIONAL BUSINESS MACHINES (IBM) - Toledo, OH 1988 1992
Major manufacturer and marketer of computer hardware, middleware, software, system hosting and consulting services.
Systems Engineer
Consultant to manufacturing companies for understanding long-term objectives, goals and strategies.
Designed, configured and supported technology based solutions to meet and sustain long-term customer growth requirements.
IT CONSULTANT - IL & MN 1987 - 1988
Clients included IBM in Rochester, MN - responsible for developing operating system code for the new AS/400. Pansophic Systems in Oak Brook, IL - conceived, designed and managed the development of an application that converted their main product, Pansophic Resource Management System - PRMS, into multiple languages multiplying sales opportunities exponentially.
Multiple Assignments
AS400 Security and configuration specialist.
Designed application solutions to meet client s requirements while also achieving a high-level of client satisfaction with minimal level of disruption.
SONICRAFT INC., Chicago, IL 1985 1987
A software and hardware defense contractor for the Federal Government, Air Force
Software Engineer
Designed encryption strategy and coding software for Department of Defense F-16s secure communication transmissions from jets to the ground.
EDUCATION & CREDENTIALS
Master of Science, Communication Systems Strategy and Management
Northwestern University, Evanston, Illinois
Bachelor of Science, Computer Science
Northwestern University, Evanston, Illinois
Advanced Project Management Certification
University of Chicago, Chicago, Illinois
PROFESSIONAL CERTIFICATIONS
Certified IS Auditor (CISA)
Certified in Risk and Information Systems Control (CRISC)
Certified in ITIL Foundations (IT Service Management) |
