Chris Womack Email & Phone Number

Birmingham, Al, Us

Birmingham, Alabama, United States

Birmingham, Alabama, United States

Birmingham, Alabama Area

- Expanding and streamlining a requirements-based governance program- Maturing policy management practices into an ongoing lifecycle- Establishing and executing an enterprise information security risk management program- Enhancing and formalizing a supplier risk management program- Implementing a continuous improvement model for a catalog of services- Developing and delivering metrics and reporting to executive management- Supporting an ongoing PCI 3.2 compliance roadmap- Overseeing information security, business continuity, and contractual compliance efforts

Birmingham, Alabama Area

• Creating and the driving vision for InfoSec Governance for US entities• Implementing a continuous improvement model for catalog of services• Establishing and maintaining an information security council and working group structure• Building and driving a requirements-based governance program• Revamping InfoSec Third-Party Risk Management Program• Formalizing and executing PCI 3.2 compliance roadmap• Overseeing information security data, privacy, and regulatory compliance efforts

Chattanooga, Tennessee Area

• Providing oversight of information security compliance program• Executing positive engagement with internal/external audit• Overseeing PCI 3.x compliance efforts and attestation• Driving process maturity through strategic planning• Representing IT compliance interests through business partnerships

• Developing controls library based on authoritative sources• Facilitating compliance efforts through security requirements• Managing information security risk through the formal risk process• Coordinating annual information security risk assessments• Performing vendor risk assessments to support procurement activities• Expanding usage of the GRC suite across the enterprise

Performing IT audits of varying size and complexity, such as IT Governance, Change Management, and ITIL-based processes. Engaging management in ongoing risk assessment, including fraud and emerging IT risks. Executing Model Audit Rule (MAR) and SOC1 Testing. Performing IT project-based audits related to regulatory compliance and application development. Serving as an Internal Audit representative in compliance-based workgroups.

Responsible for assisting clients through the performance of Information Technology Reviews, IT Risk Assessments, SOX 404 IT General Controls Testing, TG-3 Audits, Remote Deposit Capture Reviews, and BSA / AML Independent Testing.

Responsible for conducting IT Audits, 404 IT Audit Reviews, and other financial services auditing engagements.

Responsible for oversight of the Internal Audit function. Management of a staff of four auditor as well as an outsourced internal audit relationship.

Responsible for planning and conducting IT Audits.

Bachelor Of Science, Accountancy

Master, Accountancy