Herbert M Email & Phone Number

Birmingham, Al, Us

Hoover, Alabama

Responsible for providing technical guidance focused on information security architecture. Performs security research, analysis, and design for assigned client computing systems and the network infrastructure. Responsible for the prevention, detection, investigation and response with respect to security threats and attacks. Facilitates security vulnerability assessments and penetration tests. Responsible for working on security alerts, events, and security incidents, including forensic analysis. Helps plan configuration changes for major security infrastructure platforms. Implements, documents and may help develop formal security programs and policies throughout the organization and monitors compliance to these policies and programs. Researches, designs, develops and implements monitoring, response and administration of a variety of network security and remote access service. Configures and validates secure systems and tests security products and systems to detect security weakness. Contributes general consulting (risk analysis) and project support in the area of information security to IT infrastructure and division computing projects as needed to support new business requirements. Participates in the technical aspects of internal security audits and investigations. Manages and maintains a library of security audit tools, and corresponding processes that can be used for system security testing, internal audits, incident response, and diagnosis of security-related system issues. Provides technical engineering services for the support of integrated security systems and solutions. Monitors trends in information technology and security that could have an impact on the security of the organization’s products, processes, infrastructure, or customers. Provide advice and guidance to less experienced staff.

Cleveland/Akron, Ohio Area

-Programming, client-server architecture, database extraction, technology strategy, and data communication and network security. -Client/server technology platforms (NT, UNIX, Oracle). -Data extraction, analysis, and security reviews using software tools. When serving as auditor-in-charge, effectively lead in a team structure, keeping staff actively engaged on current assignments. Develop planning memos, audit programs and workpapers, and conduct entrance and exit conferences with Client Management. Manages the staffs performance of audit assignments, reviewing workpapers and creating audit reports. Programming, client-server architecture, Internet/Intranet functionality, database extraction, technology strategy, and data communication and network security. -Client/server technology platforms (NT, UNIX, Oracle). -Data extraction, analysis, and security reviews using software tools. When serving as auditor-in-charge, effectively lead in a team structure, keeping staff actively engaged on current assignments. Develop planning memos, audit programs and workpapers, and conduct entrance and exit conferences with Client Management. Manages the staff�s performance of audit assignments, reviewing workpapers and creating audit reports. Evaluates the efficiency and effectiveness of IT infrastructure and application controls, including security and internal controls. Identifies and assesses control elements to mitigate IT risks regarding the confidentiality, integrity and availability of business information. Prepare working papers that are consistent with generally accepted auditing standards, as well as established auditing standards. Make recommendations to appropriate business unit representatives for the correction of internal control weaknesses. Facilitates the communication of the results of audits and projects via written reports and oral presentation to management.

Cincinnati, Ohio Area

Lead information technology (IT) audits and/or projects related to: Evaluated and assessed significant merging/consolidating functions and new or changing services, processes, operations, and control processes coincident with their development, implementation and/or expansion. • Issued periodic reports to the Vice President, summarizing results of IT audit activities. • Provided a list of significant measurement goals and results to the Vice President. • Assisted in the investigation of significant suspected fraudulent activities within WS&FG IT infrastructure and notify the Vice President of the results. • Considered the scope of work of the external auditors and regulators, as appropriate, for the purpose of providing optimal audit coverage to the company at a reasonable overall cost. • Responsible for executing IT follow-up audits.• Responsible for executing SQL database audits.• Responsible for executing IT remediation audits.• Execution of MAR (Model audit rule) financial and IT audits.• Ensured risks are appropriately identified and managed.• Met with various internal compliance groups pertaining to critical IT findings. • Significant financial, managerial and operating information is accurate, reliable and timely.• Associates’ actions are in compliance with policies, standards, procedures, and applicable laws and regulations. • Programs, plans and objectives are achieved.• Quality and continuous improvement are fostered in the company’s control process. • Ensured significant legislative and regulatory changes that impacted the Company were recognized and addressed appropriately.• Assisted in the implementation of the annual audit plan, as approved, including as appropriate any special tasks or projects requested by the Chairman, President, and Chief Executive Officer and the Audit Committee. • Reviewed audit reports and work papers created by other auditors.

Cincinnati, Ohio Area

Lead information technology (IT) audits and/or projects related to: • Developed a monthly scorecard to ensure security measures are in compliance.• Performed and facilitate Sarbans- Oxley (SOX) IT Controls.• Provide input for the IT Audit Manager to use in performing the annual risk assessment and developing the annual IT audit plan.• Performed system implementation testing.• Ensured that the IT assets of the Company are properly safeguarded and that electronic information is accurate and adequately secured.• Monitored and audited developer’s access in AS400 and SQL databases.• Responsible for the organization and retention of evidence documentation.• Planned and documented projects results; communicated outcomes to internal and external audits.• Determine compliance with both affiliate and corporate policies and procedures.• Developed audit programs to test assigned areas based on a thorough risk assessment process.• Participated in pre-implementation reviews of new systems/products/tools to ensure that there are proper controls over the development phase and that adequate controls are included in the new system.• Communicated with various levels of management during all phases of work and kept them abreast of control weaknesses identified both during the course of the assignment and upon completion.• Compiled and document comprehensive audit work papers supporting audit scope, procedures performed and conclusions.• Performed SOX Section 404 responsibilities, recommending and verifying implementation of control gap remediation plans, daily monitoring and execution of controls; prepare IT areas for audit testing and internal control tests.• Assisted with analyzing results of penetration test and vulnerability test. • Checked audit reports and work papers created by other auditors.• Provided training to new auditors.

Cincinnati, Ohio Area

• Administrated NT Accounts.• Ensured all documentation of evidence garnered is complete and accurately filed• Analyzed and reviewed security logs.• Monitored developer access in Mainframe.• Developed and/or utilized software to perform parallel simulation, file comparisons, data validations, etc.• Granted password access to Office Managers at all locations• Supported security and business continuity audit functions by following defined procedures and practices.• Promoted operational efficiencies and identify cost-saving opportunities.• Analyzed file conversion procedures and controls and system test plans to determine adequacy and completeness.• Quarterly systems audit.• Assisted with penetration testing and vulnerability testing.• Performed and facilitate Sarbanes-Oxley (SOX) IT Controls.Performed all procedures necessary to ensure the safety of information system assets, and protect systems from intentional or inadvertent access or destruction. Interfaces with user community to understand their security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain the security required. Ensure adequate security controls are in place to protect sensitive information from unauthorized access, disclosure, modification, or destruction; provides management with status reports.

Frankfort, Kentucky

Frankfort, Kentucky

Management Certification

Bachlors Of Science, Computer Science

Bs, Computer Science, Minor Business

Activities and Societies: President of Computer Science Student organization INROADS Alumni