Clay Douglas Email & Phone Number

My scope of responsibility in this role is to manage SOX compliance projects, provide risk control advisory services, and design effective controls and corrective plans for mitigating deficiencies across multiple business units. My accountability extends to cloud computing and applicable cybersecurity SOX coverage, compliance, and deficiency/control remediation.➟ Developed/implemented IT general control self-assessment process with associated design/project management processes.➟ SOX cloud computing and cybersecurity coverage SME.➟ Facilitated SOX methodology integration into the intricate scope of new application development and SOX compliance.➟ Provided advisory services on remediation plans, report automation that drove the remediation and closure of SOX deficiencies including a reduction of 80% via improved SOX private cloud coverage.➟ Advised on remediation plans, report automation, and drove the remediation and closure of SOX deficiencies.

I was promoted to the role of Program Manager 3 and quickly promoted again to the role of Senior Project Manager III, a senior project leadership role where I facilitated the successful implementation of ITSM processes into the organization’s IT operation.Throughout my tenure in these roles I:➟ Ensured ITSM process design compliance with applicable best practices and company policies and alignment with COBIT, HIPAA, and SOX risk management.➟ Established effective relationships with internal audit, information security and risk management organizations resulting in proactive control enhancements, institutionalization of a continual improvement environment and implementation of documentation guidelines to support compliance.➟ Oversaw the rollout of ITIL event management and change management processes in preparation for seamless cloud transitions.➟ Provided ITSM advisory services resulting in the implementation of a gap analysis model that increased service owner satisfaction, marketed ITSM value and reduced outside consulting costs.➟ Developed the project work breakdown structure milestones for 3 mission critical projects that met project objectives on schedule.➟ Identified metric inaccuracies and a gap analysis that improved employee off-boarding controls and recommended cost saving actions.

ITSM advisor on the implementation of gap analysis models focused on increasing service owner satisfaction, marketing ITSM value, and reducing external consulting costs. ➟ Designed, enabled implementation, and documented controls adhering to ITIL framework and best practices.

I joined McKesson to establish and drive IT audit and risk assessment strategic direction, plans, and ongoing risk factor relevance and priority risk assessment. My responsibilities also included the management of co-sourced IT resources, development of annual IT audit plans, communicating results to senior management and monitoring corrective action to completion. ➟ Developed and conducted IT risk assessments and annual IT audit plans.➟ Provided advisory services resulting in control enhancements, continuous monitoring of control effectiveness and efficient documentation requirements to support compliance. ➟ Managed co-sourced IT resources to drive the audit plan to successful completion enabling corrective action development, tracking, implementation, and control process maturity.

As Audit Manager, Information Technology and Security I established the IT Audit function and subsequently developed annual risk assessments, managed audits and co-sourced audit efforts for improved operating systems, network security, application security, application sourcing, and information access controls.➟ Continuously monitored IT risk environment to ensure alignment of business and IT risks.➟Implemented annual risk-based IT audit plans. ➟ Mitigated potential software licensing penalties.➟ Developed the Information Security Policy for RMC USA acting in an audit advisory role to the CIO.➟ Developed and implemented the IT Audit Function and obtained Senior Management’s approval of the charter, risk assessment, and annual audit plans.

Bethesda, Md, Us

Selected for a senior role when the Information Technology Unit was established.➟ Responsible for risk assessment, audit planning, performing fieldwork, and coordinating the efforts of supporting auditors. ➟ Earned increased responsibility for leading complex financial/operational and IT audits managing as many as two assistant auditors. ➟ Facilitated audit planning for selected operating companies.➟ Developed assistant auditors while serving as mentor to new employees, rotating auditors, and interns.

Bs In Business Administration, Accounting

Mba, General