Chad Hartmann - Cissp, Crisc, Cisa Email & Phone Number

Minneapolis, Mn, Us

Marlborough, Ma, Us

• IT SOX (Sarbanes-Oxley) program manager responsible for maturing and managing the IT SOX Compliance program. Executed IT SOX-related activities with system owners, cross-functional control owners, internal auditors, external auditors, and external SOX consultants.• Execute annual IT SOX risk assessment and scoping in coordination with the Global SOX team.• Provides governance over the remediation of internal IT control gaps. Ensuring timely remediation and re-testing of controls by year-end.• Administer quarterly IT SOX training to control owners and other key stakeholders.

New York, Ny, Us

• Influence IT SOX, SOC (1, 2, and 3), and IT risk assessment engagements, including performing audits, readiness assessments, co-sourcing support, and staff-augmentation.• Manage and successfully execute post-acquisition IT SOX readiness assessment for Fortune 500 company. Assisted client with gap remediation, formalizing ITGC controls, and onboarding to parent company’s IT SOX processes.

Minneapolis, Minnesota, Us

- Development of IT General Controls (ITGC) framework- Assist Assurance and Due Diligence teams with internal IT SOX and SOC2 audits- Assist Independent Auditors with external IT SOX audit and walk-throughs- Assist Third Party Service Provider (TPSP) team with third party risk assessments- Development of Information Security metrics and reports- Use of various information security frameworks (e.g. COBIT, COSO, ISO 27k, NIST CSF, and NIST 800-53)

Austin, Tx, Us

• Provided IT Audit, Information Security, Compliance, and IT GRC services to clients.• Execute annual user attestation across 100+ applications for a financial services company.• Develop and implemented enhancements to a retail company’s RSA Archer IT GRC system.• SOC 2 readiness assessment for large health care company.

Toronto, On, Ca

- Implement RSA Archer GRC for a diverse set of clients across multiple industries- Perform IT GRC current state assessments and develop strategy and implementation roadmaps- Perform risk assessments using industry recognized control frameworks- Perform IT control reviews testing control design and operating effectiveness- Perform third party risk assessments- Develop proposals for a variety of service offerings

Dublin 2, Ie

• Conducted a risk assessment of a government entity’s most critical financial information systems. Assessed assets for compliance with NIST 800-53, ISO-27001, and FIPS-200.• Advanced implementation of RSA Archer IT GRC policy module at a major US utility company. Mapped policies, standards, and procedures to NIST 800-53 and NIST 800-82 within Archer.• Performed third-party vendor risk assessments on behalf of financial services client.

Minneapolis, Minnesota, Us

- Manage Data Loss Prevention software. Participated in entire project life cycle, meeting project milestones and deliverables.- Drove effort which resulted in reduction of sensitive data at rest and in motion. - Manage compliance of email and laptop hard drive encryption, resulting in reduction of data breach incidents.- Educate end users of information security policy and best practice for handling sensitive information.- Manage data breach investigations, documentation, and reporting.- Conduct wireless audits to detect rogue and noncompliant wireless access points.- Responsible for remediation of internal and external information security audit findings.

Minneapolis, Minnesota, Us

Master'S, Science And Security Technologies

Bachelor'S, Business Computer Information Systems

Bachelor'S, Marketing