Responsible for all aspect of information security posture and compliance for Countrywide’s largest business unit. • Authored Security Policy, Guidelines and Standards for compliance with ISO 17799. Implemented automated virus reporting.• Designed security roles for Peoplesoft/Oracle 9i implementation• Performed preliminary IT audit functions for departmental software, databases, hardware and procedures • Coordinated Data Classification and Security project to implement controls on legacy systems and to meet CA SB 1386, GLB and Sarbanes-Oxley requirements.• Assisted business unit in meeting compliance goals for corporate policies and regulatory requirements.

• Retained as Manager-Technical Services, achieved promotion to director level within one year. Supervised direct reports for Application Training, Telecommunications Support, Help Desk, Network Operations, and WAN operations supporting over 150 remote offices in 42 states. • Designed, implemented, and administered NT and Citrix server farm (Metaframe 1.0/1.8) and subsequent upgrade to Metaframe XPe and Windows 2000. Implemented Active Directory. • Designed and implemented remote network access via encrypted web pages and VPN systems. • Consolidated Application Training department and Help Desk operations to improve efficiency. Developed and implemented training program to encompass proprietary applications and standard office applications. • Authored and implemented Network Security, Disaster Recovery Preparedness, Business Continuity, Acceptable Use and other departmental policies. • Designed and implemented Intrusion Detection System. Responsible for responding to alerts and evaluation of intrusion attempts. Implemented network security policy procedures to comply with HIPAA regulations. Implemented policies and procedures that resulted in an increase of system availability and reliability that exceed 99.9%. • Performed forensics investigations, security, and vulnerability assessments for computing environment. Designed, implemented and administered Cisco PIX and Checkpoint firewalls. • Authored policies and procedures to standardize departmental operations and reduced budgetary requirements. • Met MBO's as assigned by senior management for 2000, 2001 and 2002. • Provided third level technical support (Windows 95/98/NT/2000, Exchange 5.5 & 2000, Checkpoint Firewall, IIS, Citrix, MS-Office)

• Responsible for all IS/IT and telecommunication services for 12 affiliated companies in a mixed NT/Novell/Unix environment. Primary support was provided for Bluebonnet Savings Bank, Stone Capital and Stone Credit Services. Managed, staffed and assisted in training for WAN/LAN, telecommunications, and desktop support/helpdesk operations. • Prepared annual reports for FDICA (Bluebonnet Savings Bank). Successfully performed annual disaster recovery testing as required by regulatory agency. Specified equipment requirements and authored RFP and RFQ documents. • Implemented and managed Citrix servers to permit remote access to network systems. Performed LAN/WAN design, implementation, troubleshooting and administration for NetWare 4.11 and NT (IIS, Exchange, Back Office, Citrix, SQL) systems. Expanded existing LAN into a 6 state WAN to accommodate the acquisition of new companies. • Designed, implemented and successfully tested Disaster Recovery and Business Continuity Plans. Implemented network security policies and practices to meet federal banking requirements. Chaired steering committee to insure operations met or exceeded federal banking requirements. • Achieved highest possible ratings for Y2K, disaster preparedness and systems operations in comprehensive audits by Office of Thrift Supervision. • Designed, implemented and monitored network security policies to protect corporate WAN from internal and external attacks. Performed semi-annual vulnerability testing and reports to comply with federal banking regulations. Prepared network documentation for client's internal audit department and federal regulatory agencies.