Brittany Randall Email & Phone Number

Scottsdale, Arizona, United States

Senior Principal Security Engineer (January 2024-Present)Director - Technology Risk Management (September 2021-December 2023)Senior Manager - Technology Risk Management (November 2020-August 2021)Manager – Technology Risk Management (October 2017–October 2020)Senior Technology Risk Manager (March 2017-September 2017)Manage IT compliance and risk management opertions covering the following regulatory compliance areas: WebTrust, PCI-DSS, GDPR, and SOX IT General Controls. Work includes external audit oversight, compliance monitoring programs, risk assessment, consultation, and compliance system support. • Develops requirements, repeatable process methodology, and automation programs to minimize time spent on external audits and manual compliance reviews.• Enables ongoing process improvements resulting in increased efficiency, decreased audit deficiencies, and minimal auditor feedback/questions. • Identifies risks and in-line control opportunities to better align with business objectives and reduce audit/compliance business partner fatigue.• Adopted agile project methodology to support team workloads. First non-development team to complete internal agile assessment.

Senior Internal Auditor (December 2013-March 2017)Internal Auditor (September 2011-December 2013)Supported internal and external IT and financial audit work covering the following regulatory compliance areas: WebTrust, SOC 2, PCI-DSS, and SOX. Work included evaluation of the effectiveness of controls, audit planning, compliance reviews, gap assessments, risk assessment, external audit coordination, process improvement.• Served as team’s WebTrust and SOC 2 subject matter expert. Support included project management of annual audit exercises, in-audit remediation, and ongoing process consultation. • Worked with external auditor partners to develop an IT reliance testing strategy for WebTrust and SOC2 work which resulted in 50% increase in reliance audit test work year over year and reduction in audit fees.• Led high risk process areas in support of SOX 404 compliance program. Work included process mapping, control identification, walkthrough documentation, and testing with expertise in IT controls and data flow.• Assisted in development and documentation of team processes and audit methodology. Supported staff team member development through coaching and project oversight.• Developed programs to streamline and automate reoccurring audit tasks including automated sample selection, work paper mark up, testing matrix generation, and project tracking.

Supported candidate experience with the following focus areas: job posting management, background review, candidate travel and coordination, new hire administration, reporting, and applicant tracking system support. Specialties included Microsoft Excel and process improvement. • Streamlined high-touch administrative activities resulting in increased efficiency and renewed focus candidate pipelines.• Developed weekly status reports and real-time reporting resulting in increased visibility to executive management.• Oversaw year one of an internal development initiative which included process design and execution, ongoing correspondence with over 275 internal applicants and 20 hiring managers, interview and testing coordination, and transition administration in addition to daily job responsibilities.

Auto Finance Group (Summer 2010)Researched the integrity of file folders in the document management group. Analyzed the current conditions of the folders and determined defect rates and costs. Created a cost benefit analysis and made a recommendation at the completion of the internship in a project report which included, the details of the problem, the methods used for data collection and analysis, and a discussion of all possible solutions with a final recommendation. In addition to intern responsibilities, evaluated how mail was being handled at the auto finance facility. Suggested process improvements that would save the facility around $45k per fiscal year.Technology Information Group (Summer 2008)Created and developed tools using Microsoft SharePoint to measure productivity and to organize training material for the Learning and Development Team at Technology Connections. Also worked on the Technology Connection Recognition page and created a project tracking tool for the workforce planning team. Additionally, worked with other Wells Fargo TIG interns and researched the feasibility and need for a Central Application Documentation Repository (CADRe) for the storage of software application documents in conjunction with SOX compliance efforts for in-scope applications.