Chad Barker Email & Phone Number

Atlanta, Ga, Us

Coral Gables, Florida, Us

Responsible for managing all aspects of information systems and operational reviews with auditors located in three different offices.  Developed and implemented a comprehensive IT audit plan and risk assessment methodology.  Coordinated compliance efforts for SSAE 16 reviews, FFIEC examination, Sarbanes Oxley, and PCI.  Implemented improvements to existing audit department processes and standard practices. Reduced the impact of compliance audits on the business units by effectively coordinating testing efforts and timelines.Significant Accomplishments: Led the efforts to select, implement, and customize the Archer audit management software to improve the efficiency and effectiveness of the audit department.  Consolidated the eight existing SSAE 16 reports to four which resulted in reduced costs, increased efficiency, and increased audit coverage.

Langley, Berkshire, Gb

Responsible for all aspects of information systems and operational reviews as well as implementation of IT governance program.  Performed Travel and Entertainment review making recommendations resulting in over $1 million in annual cost savings. Developed the first IT audit plan by performing a company-wide risk assessment.  Coordinate external audit activities for SAS 70/SSAE 16 reviews and PCI compliance audits.  Designed and implemented audit department processes and standard practices. Selected by CIO to perform a special project to implement IT Governance controls throughout the IT organization.Significant Accomplishments: Performed a Travel and Expense review with recommendations resulting in over $1 million annual cost savings. Reviewed existing Sarbanes-Oxley compliance program for IT General Computer Controls and provided recommendations to rationalize controls and improve efficiency. Reduced IT controls from over 400 to less than 40. Using ACL, identified data conversion errors during the data migration phase of a new, business critical system implementation resulting in annual financial assistance cost savings over $200k. Designed and implemented automation to support IT governance for all software development and support projects. Developed policies, standard procedures and the framework for the creation of an Information Security Risk Management function. Led a project that provided significant improvements in the ability to identify and monitor security events.

Developed the original risk assessment methodology for the Internal Audit Group. Primary responsibility for scheduling, performing and managing information systems and operational reviews. Assist with the development and maintainenance of the annual audit plan through a comprehensive risk assessment. Responsible for summarizing, reporting and presenting audit issues to Senior Management and Berkshire Hathaway. Provide recommendations to improve the controls and efficiency of information systems and business processes throughout the organization. Performed data analysis on key systems to identify data errors or possible fraudulent activities.Specific Accomplishments:Developed and maintained Sarbanes-Oxley compliance program for IT General Computer Controls.Evaluated, selected and implemented software to assist with the Sarbanes-Oxley compliance program.Implemented software to assist with the automation of audit workpapers, issues and time reporting.Recommendations from a review of the claims system resulted in over $600,000 in annual cost savings.Recommendations from a special cost savings project resulted in over $2 million in annual cost savings.

Responsible for the development and implementation of the ChoicePoint IT security strategy, administration and architecture. Re-engineered the IT Security effort using a business-oriented approach that was fiscally responsible and scalable. Chief architect for all information security efforts in a complex multi-platform network comprised of various operating platforms with several hundred critical business applications.Managed all aspects of IT Security including user administration, policy development, risk assessment, perimeter and internal security architecture, internal consulting, project management, awareness programs, incident response and auditing. Represented ChoicePoint to government agencies, regulatory bodies and customers.Responsible for the development, testing, and maintenance of ChoicePoint's disaster recovery plan. Specific Accomplishments:Increased Senior Management's security awareness and grew ChoicePoint's security budget from $400k to $4m in two years and headcount from two to twelve over the same period. Initiated a program that focused the previously decentralized security efforts into a centrally directed and monitored function. This included analyzing, defining and implementing an improved and stronger security framework through automation. Developed ChoicePoint's Corporate Information Security Policy.Enhanced ChoicePoint's strong perimeter security with increased host and application level security.Gained executive approval and supervised deployment of company-wide intrusion detection system.Defined and documented security baselines for all technology platforms and implemented tools to monitor compliance with these standards. Supervised vulnerability assessment and penetration testing efforts across all business units and subsidiaries. Provided detailed reports on system vulnerabilities and threats to business leaders while recommending feasible solutions to correct these exposures.

Established the Information Systems Internal Audit department following the spin-off from Equifax. Developed original risk assessment methodology, systems audit plan and budget. Created a time tracking and reporting system as well as a recommendation tracking system. Responsible for summarizing, reporting and presenting systems audit issues to the Audit Committee of the Board of Directors. Primary responsibility for scheduling, performing and managing information systems and operational reviews. In charge of developing and maintaining annual systems audit plan. Performed company-wide technology assessment and presented recommendations to senior management. Recommendations from this assessment resulted in significant efficiency improvements and over $1 million in annual cost savings. Assisted with the implementation of Oracle financial applications.

Responsible to coordinate the planning and execution of information systems and operational reviews. Types of reviews include technical, development, application, due-diligence, pre-implementation, efficiency, compliance and security. Coordinate and supervise staff of seven professionals on multiple audit projects. Responsible for selecting, training and evaluating personnel.In charge of developing the annual EDP audit plan and the quarterly update to the Board of Directors and Internal Audit Committee. Coordinate annual SAS 70 review with the external auditors. Member of the Year 2000 Core Team and the Internet Task Force. Requested by management to assist on several cost reduction/re-engineering projects. Recommendations from one project resulted in annual savings exceeding $1.5 million.

Responsible for the delivery of EDP security, audit and control services to the clients of the New Orleans, Baton Rouge, Birmingham, Mobile and Jackson offices. In charge of planning, organizing, performing and completing all phases of EDP control based audits. Trained, supervised and evaluated staff of three consultants based in New Orleans, supplemented by professionals from other offices when specific skills or experience was required to meet client needs. Clients included banks, health care organizations, public utilities and insurance companies.

Delivered EDP security, audit and control services as part of the external financial audit and in a consultative role to non-clients. Involved in audits of several large SEC clients, specializing in the insurance and public utilities industries. Assisted micro-advisory group on numerous engagements providing micro-support and procedures manuals. Also worked on conventional audits throughout the year specializing in the insurance industry.

Master Of Science, Network Security

Master Of Business Administration, Information Systems Management

Bachelor Of Science, Accounting