Managed technology audit and control advisory engagements where he collaborated with audit and technology executives to perform technology risk assessments and build IT audit plans, lead audit teams, design audit templates, methodologies and tools, and deliver audit reports with recommendations to improve technology operations, mitigate risk, and achieve compliance.Helped clients design and implement Sarbanes-Oxley (SOX) technology compliance programs where he led IT general control documentation and assessment teams for pre-IPO clients. Advised on the design, execution, and testing of IT general controls, application controls, key reports and helped implement governance, risk and compliance and segregation of duties analysis tools and processes.Led audit teams across all IT strategic and operational process areas including cybersecurity, privacy, Agile/DevOps, cloud, and asset management. Audited major cloud, server, mobile, and database platforms as well as ERP, industry-specific, and homegrown application environments.

Led IT Internal Audit and IT SOX Compliance programs at a global airline for six years. Concurrently managed the redesign of the IT SOX program while building an IT Internal Audit program as the airline underwent merger and integration efforts. Audit plans included technology governance, security and privacy, disaster recovery, and audit finding remediation monitoring and reporting.

Implemented Sarbanes-Oxley (SOX) Section 404 IT internal control compliance programs for over thirty clients across all major industry categories. Led IT SOX control documentation and assessment teams for pre-IPO, first-year, and multi-year SOX clients ranging in size from $50M to $40B.Managed outsourced and co-sourced IT audit engagements for clients across several industries where he developed audit plans, lead audit teams, designed standard templates, methodologies and tools, and delivered audit reports with recommendations to improve operations, mitigate risk, or achieve compliance. Chad has led or executed audits in most IT strategic and operational process areas including IT governance, general controls, application controls, cybersecurity, and continuity. He has audited most database and operating system platforms (i.e., Windows, UNIX, Mainframe, Oracle, and MSSQL) as well as ERP, industry-specific and homegrown application environments.

Managed IT audit engagements for clients across several industries where he lead audit teams; designed standard templates, methodologies, and tools; and delivered audit reports with recommendations to improve operations, mitigate risk, or achieve compliance. Chad has led or executed audits in most strategic and operational IT process areas including IT general controls, application controls, security and access controls, and IT continuity controls. He has audited most database and operating system platforms (i.e., Windows, UNIX, Active Directory, Oracle, and MSSQL) as well as ERP, industry-specific and homegrown application environments.Managed Sarbanes-Oxley (SOX) Section 404 internal control compliance programs for several clients across many industries where he has assessed internal controls for design and operating effectiveness. Chad has experience implementing and assessing IT general controls as well as automated application controls for pre-IPO, first-year, and multi-year SOX clients.Designed and implemented a technology change detection and security compliance process utilizing Tripwire Enterprise in critical application and server environments for a leading technology manufacturer, national financial services provider, and regional commercial bank.

Performed IT Service Management (ITSM) consulting for clients in the retail, financial services, and insurance industries against ITIL and COBIT frameworks. On these projects, he facilitated IT Controls Performance benchmarking workshops; reviewed and evaluated the adequacy of policies, procedures, and organizational design; performed targeted follow-up interviews with IT management and business stakeholders to fully understand processes, roles, and challenges; observed and inspected IT automation tools and reporting capabilities; and performed substantive testing to determine ITSM control operating effectiveness.Assisted in the implementation Microsoft SQL Server database solution that served as a remediation tracking tool for a wholesale mortgage lending subsidiary of a consumer finance client. He managed all data imports and exports to and from the client and their third party service provider, generated reporting data to the client on a regular basis, and developed and tested database functionality enhancements throughout the project.

Tested SOX IT General Controls and application controls for four clients, performed IT Service Management assessments, and supported the implementation of a remediation plan tracking tool and asset lifecycle management program.