Daniel Newby Email & Phone Number

Provide information systems advise to Executive, Boards, and Committees on good practice in mitigating information and cyber security risks to provide assurance that data and systems are protected and operating effectively.

Brisbane, Queensland, Australia

Brisbane, Queensland, Australia

As the Audit Portfolio Manager I provided direct support to the Chief Internal Auditor. I delivered leadership and technical expertise to the risk and assurance advisory service function of BCC through developing the internal audit process while ensuring the development and delivery of the annual audit plan. I mentored and provided guidance to an audit team of eight professionals to manage and extract value from the co-sourced agreement with Council’s audit delivery partner.Brisbane City Council is Australia’s largest local government authority. Assurance Services Branch (AS) provides governance, administration, services and support frameworks to meet the needs of Council. AS report to the Audit Committee, Chief Executive Officer, and the Office of the Lord Mayor. AS assist the Executive Management Team and senior managers discharge their responsibilities through a process of systemic and objective reviews.

Brisbane, Australia

I developed and ran specific data analytics and reports for Public Trustee Internal Audit unit, primarily using IDEA.The Public Trustee is a self-funding statutory authority that reports to Queensland Parliament through the State’s Attorney-General. Serving Queenslanders since 1916 with over 600 staff located at 16 offices across the state. They are the largest maker of wills in the southern hemisphere.

Brisbane, Australia

As a Group Internal Auditor reporting directly to the General Manager Risk and Assurance. I evaluated risks and controls in relation to key UCQ policies, information systems and key business initiatives, and provided objective assurance and advice to executive management and the board. Key AchievementsProject assurance for the finance system replacements (Dynamics AX) for UnitingCare Queensland and UnitingCare Community (Lifeline);Developed the initial group risk reporting template, demonstrating the effectiveness of the mitigation strategies being implemented across the group;Assurance and advisory for UnitingCare Health’s implementation of a ticketless parking system for paid parking across multiple premises;Investigated security breaches, and developed and implemented process for assessing access controls across group systems; and Designed and implemented data analytics processes for performance assessment of payment card use, trend analysis of the prosthetics supply management at Uniting Care Health, risk analysis for payroll and vendor master file changes, and OH&S report analysis to ensure insurance premiums were controlled. UnitingCare Queensland (UCQ) is a not-for-profit health, aged care, and community service organisation, based in Brisbane, providing service across three states, and employing over 15,000 staff, with a further 15,000 volunteers. UCQ’s operating model consists of four distinct business units, and a number of separate information systems.

I began work for Queensland Government in the Department of Public Works (DPW) in 2007, before a machinery-of-Government change resulted in my appointment to the Department of Science, Information Technology, Innovation and the Arts (DSITIA) in 2012. As the A/Manager IS Audit for DPW I answered directly to the Head of Internal Audit, and led a team of up to four internal auditors in performing reviews on IT project, post-implementations reviews, key operational processes, and cyber security reviews.Key AchievementsDevelop and implement end-to-end COBIT 5 processes to comply with the IIA requirements for internal audit, that would enable financial and IS review to utilise the same audit program to ensure process, application, and data analysis were all tested and supporting the overall audit scope and objectives; Risk assessments of key whole-of-Government process including PCI-DSS, human resource controls (on-boarding/off-boarding), and Project assurance reviews for key DPW projects - Q-Build asset tracking system, Q-Fleet asset management system, and whole-of-Government Travel Management System project;Completed the implementation of the DPW Controls Assurance program enabling for the tracking of the effectiveness of key business process controls;Security reviews of key whole-of-Government systems, including SAP, to identify the risks to departments supported by DSITIA;Performed the first DSITIA review of ITILv3 framework for the Queensland Government Chief Technology Office.

Reporting to the Head of Technology Operations, I was responsible for the assessment of changes to key banking system changes, pre-production security controls, and analysis of business project controls.I developed the initial framework for the governance controls required for the implementation of the counter terrorism funding/ anti-money laundering legislation;Risk assessment of changes proposed to the core banking system to ensure the most critical changes were rigorously assessed;Provided project assurance for the online banking project to ensure the delivered product met the documented requirements within the agreed timeframe;Developed and implemented security controls for the reproductions system, to ensure internal security was adequate, and no known deficiencies were promoted to the production network;Supervised the implementation of data analysis program on the pre-production network to ensure the transactions performed outside of the core banking system were reviewed to the same standard as the production retails banking system.

Answering to the Director - Security and Assurance, I led a small team in performing risk, assurance, and security assessments for planned and project software releases for Golden Casket Lottery Corporation.