The Security & Compliance Analyst is a member of the GateHouse Corporate Security team reporting to the Director, Governance & Compliance. Contributed to GateHouse Media's Sarbanes-Oxley (SOX), PCI-DSS and overall security operations and compliance efforts by defining, developing, implementing and managing processes and procedures that comply with corporate security strategy, policy, controls and standards.

• Coordinate System Access Request (SAR) process; validate that requests are complete and approved by system data owner(s). Route approved requests to the appropriate application IT administrator for fulfillment. • Execute quarterly Entitlement Review; request system user security reports from the appropriate application IT administrator. Distribute to system data owners and collect required access changes and data owner approvals. Route access changes to the appropriate IT administrator for fulfillment.• Kickoff, coordinate, and perform supporting system access management control tasks such as generic account reviews, vendor account management, administrative access reviews and scheduled password changes.• Coordinate quarterly controls such as data center physical access reviews and backup restoration tests with Infrastructure team.• Organize and maintain retention of information required to evidence that controls are operating effectively in each control area.• Fulfill/coordinate information requests supporting Internal Audit ITGC testing.• Perform control effectiveness reviews; ensure that IT Shared Services teams are following established policies & procedures.• Prepare/maintain mechanism to track control effectiveness status, completion of periodic controls.• Create and maintain compliance operations procedure documents, including forms and documented process workflows.• Assist in the selection, implementation and administration of workflow automation tools.• Establish and maintain strong working relationships with data owners and IT Service Delivery team members.• Assist new acquisitions with adoption of SOX controls and procedures required as part of corporate SOX compliance..

• Focal point for client interaction on technical concerns, facilitating communication with technical teams by instructing and directing on ticket requirements, problem issue ownership, team specific required lead times for changes, routing established tickets to correct teams, and enforcement of established process and policy• Coordinate troubleshooting for high priority issues across multiple disciplines including hardware failures, system restores, network device configurations, and SAN device failures• Plan, schedule, and run Global Maintenance activities across multiple clients and disciplines with duties consisting of resource planning, gaining client approval, monitoring change procedure, and providing status updates for management and clients• Advise on, document, and run “Lessons Learned” meetings following large scale changes, Root Cause Analysis for high priority issues, and after new processes go into effect• Conduct biweekly meetings covering the state of the offering, technology upgrades, and client concerns. Meetings include reviewing, documenting, and publishing any and all actionable items with representation from Unix/Linux, Wintel, Backup and Restore, SAN, Database, and Network teams• Monitor datacenter capacity, service line wide storage concerns, and backup/restore issues daily• Create and maintain project plans for service line wide projects• Devise, run, and report on weekly Technical Advisory Board for all changes within the service line, ensuring changes have all requirements met, including assignment, back out plans, and cross discipline reviews and approvals prior to representing each change in Change Advisory Board meeting. • Review and report monthly on past changes in ticketing system that have failed or have not been brought to completion to ensure ticket queues are clear and all changes accounted for, and correct process was followed• Document, implement, enforce, and train clients on process changes following ITIL standards

• Handled standard Unix/Linux OS issues – account additions, space capacity, memory alerts, add/remove storage, NIC configurations, etc. • Maintained ticket queue by adhering to quality standards and internal guidelines• Troubleshot complex issues with client representatives, DBA, and Network resources to lessen downtime for clients• Administered ESX servers, including configuration of virtual servers and virtual network devices

• Frequent customer interaction to manage expectations and client satisfaction• Advanced troubleshooting of System Admin escalations for Windows and Unix systems for application, OS, and hardware issues for Enterprise level clients• Troubleshot network issues relating to web and FTP traffic • Creation of environmental architecture for servers and network• DNS troubleshooting and IP administration via Men & Mice• Escalation point between operations (SA, Network, Security, DBA) and the client for technical issues• Performed complex web and application tier software scheduled maintenances and upgrades• Created and configured Code Deployment Scripts used by the client through a web based portal • Deployed and configured Hyperion Reporting Suite 9.3 for cross team reporting• Active Directory maintenance for client and internal domains• Designed and maintained internal SharePoint environment including building team site content and user administration• Created and implemented internal company website site used for training, client specific troubleshooting, and documentation organization • Developed a service offering website showcasing benefits to potential clients using sales/marketing collateral, defining service/product specifications, and creating web tours of key systems/tools• Constructed HTML, CSS, and ASPX templates for implementing future additions to the site• Actively performed website maintenance and template revision to meet with business and auditing requirements/standards

• Controlled and created client architecture, maintenance, and troubleshooting documentation including documentation controls, version numbering, and restricted access levels. • Revised and created website content as well as documentation templates adhering to audit standards for company wide compliancy• Conducted process mapping to determine website/documentation needs across multiple teams handling multiple tasks• Crafted executive level business presentations, sales pursuit presentations, client communications, and team based internal html distributions

Directory and Naming Engineering Team (Xerox Account) 1/2006 to 3/2007Involved with the engineering of company wide Active Directory and Enterprise Naming solutions Documented solution proposals, procedural steps, and troubleshooting guides. Performed directory and naming escalations, verification and processing of DHCP scope requests, disaster recovery drills, and annual configuration audits. Participated in global WINS cleanup, global IP stack remediation, engineering solution for readdressing Directory and Naming servers, global NetPro CAAD and Directory Analyzer implementations, and creation of DHCP scope request process. Remote Desktop Management (RDM) Team (Xerox Account) 3/2005 to 1/2006Troubleshoot end user workstation OS and hardware failures. Hardware SME involved with the creation and maintenance of the remote hardware process flow charts and the creation of troubleshooting procedure documentation used in training. Participated in weekly meetings with Client representatives on hardware process, current issues, and outside vendor relations. Resolved remote end user tickets regarding network connectivity, Microsoft Office applications, Blackberry, remote connections, hardware, and general problems associated with Windows XP. Involved with the training of new hires on RDM procedures, tools, and problem solving. Performed account administration for RSA SecurID system, Exchange accounts for Outlook 2003, and general domain account administration and user migration.

Troubleshooting general PC issues ranging from Microsoft Office applications to network connectivity. Supporting end user migration from Exchange 5.5 servers to Exchange 2000 servers. Training new hires on procedures and problem solving.