Established business security access team to provide analytical and consulting services to create and maintain business access roles, application access roles/profiles, and segregation of duties conflict analysis. Team provided identity and access management (IAM) consulting services and training for strategic project implementations of new technologies as well as ongoing organizational and process changes for 6 operational business units.Led and managed continuous improvement initiatives to embed and formalize identity and access processes into software development lifecycle, to improve foundational data used for request, approval and certification processes, and to improve operational efficiencies and reduce risk related to onboarding, request and provisioning, and certification processes.

Established IT Internal Audit group and implemented technology risk assessments for 1400 person Information Technology Department which included control testing, reporting, and tracking/monitoring of control deficiency remediation. Assessment areas included application development and maintenance, change management, incident management, identity and access management, infrastructure security, maintenance, and monitoring, and third party assessment and oversight.

Provided ongoing consultation and analysis of process control documentation regarding entity level, business process, and information technology requirements for Sarbanes Oxley compliance. Provided oversight and managed multiple ongoing SOX audits and outsourced internal IT audits for large and mid-size clients in the financial services, retail, real estate, construction, transportation, technology, and energy industries.