Keely Thomas Email & Phone Number

Focus includes:Manage SOX 404 program for Global Business Information Systems group.Contribute and provide assessment towards newly developed company Policy and Procedures.Assist GBIS Leadership with packaging and validation of issue remediation plans being presented back to IA and External Auditors.Manage and implement all GBIS testing for SOX 404 compliancyEstablish and submit SOX 404 Certificate write-ups on a quarterly basis to GBIS ManagementProvide guidance and assist with creating new control processes and proceduresProject Manager with oversight in developing and managing new Vulnerability Management Program

Focus includes:Provided assistance with revamping of SOX 404 program for Global Business Information Systems group.Managed and implemented newly designed test templates for all SOX controls. Contributed and provided assessment towards newly developed company Policy and Procedures.Assist GBIS Leadership with packaging and validation of issue remediation plans being presented back to IA and External Auditors.Managed and implemented all GBIS testing for SOX 404 compliancySelf-initiative to learn SAP system in providing better understanding of system and material needed in completing testing process.Provided and contributed in developing a new control process towards Security Event Management and Change Management.Provided and developed several different Matrixes in improving management of control processes.

Focus includes:Implementation of HIPAA, SOX-404, Data Privacy, Risk Assessment, and Gap Analysis in providing support in full spectrum of Information Technology. Also performed Internal and External audits for the banking and industrial environments. Auditing and enhancing of Change Management processes with various systems.Provided and developed metrics towards assessments and results to clients and Sr Management.Auditing and enhancing of security policies. Mapping back of IT components to business processes with technology resources, applications, and databases that house critical and sensitive information.Assessment and security testing on different platforms in providing assurance towards confidentiality, integrity, and availability to the data.Inventory assessments towards HIPAA, Banking Industry, and SOX-404 based environments in analyzing information systems, customer data, and assessing the sensitivity of client's data. Planning, execution, and communication of significant issues to Senior Management in advising of industry best practice and needed compliance towards remediation.Assisted with research and evaluating a project in defining a Risk Assessment Tool to be utilized to execute better service for clients creating their risk assessment processes.

Focus includes:Provide assistance to the Auditing Department for all audit activities, including audit engagement and remediation. Provide awareness to GTI Leadership of any audit findings that are possibly escalating.Assist GTI Leadership if needed with packaging and validation of issue remediation plans being presented back to Audit.Provide trend analysis and GTI Audit Metrics for Senior Management towards similar audit issues appearing in all GTI Audits.Participate in all Kick-off, Status, and Exit Meetings held by the General Audit Department for each designated Audit.Provided assistance with SOX testing and validation, along with assistance towards SAS70 audits.

Supporting and enhancing the Corporate Security Technology Development and Delivery Services Department. This includes the effective and efficient design, implementation and maintenance of integrated system security controls, administrative process and technologies that deliver Security Services via Alternative delivery channels in accordance with corporate strategic plans, operating plans, and IT Architectural requirements.Focus includes:Lead for Enterprise Security Management towards compliancy for all Lines of Business on remediating risk vulnerabilities. Managed 8 ESM Managers with thousands of agents towards BANK ONE compliancy.Managed and provided reporting on all ISS vulnerabilities issued to Production Managers for support team remediation per Line of Business.Provided consulting with LOB's and Midrange Engineers on security issues, or projects towards compliance with BANK ONE Standard Policies.Managed and maintained Exception Waivers submission process for Enterprise Midrange.Validated CSIRT Automation Inventory for Tivoli Endpoint connectivity to Midrange Support Groups.Managed and processed CSIRT Bulletins to distribution of need to know personnel for security awareness.Provided Daily EM Health Report for any NAV, ISS, or CSIRT High Punch list issues needing resolved to Production Teams.Managed and updated ITRIMS (Corporate IT Website) on Midrange owned/supported issues.Managed and provided information on Norton Antivirus issues for all Midrange owned, and supported LOB servers.Security Liaison for Enterprise Midrange supporting mainframe accounts and access, along with approvals for Remote Access.Provided and updated Security processes for Enterprise Midrange.

Focus includes:Provided and maintained technical support for 21 firewalls within CheckFree Corporation.Investigated and analyzed any unusual activity reported by ISS on IDS Sensors or Firewall traffic.Implemented Change Controls for firewall rule additions or deletions from company security policies.Supported HA (High Availability) using Stonebeat and Rainwall software.Provided support and technical assistance with Norton's Anti-Virus.Provided Daily Wellness Checks and CERTAIN (Computer Emergency Response Team And Information Network) Bulletins for known vulnerabilities.Provided Certificate Management for all web server certificates within CheckFree, including 3rd party customer notification of expiring certificates.Contributed to several assigned projects that included firewall support and other security assistance.Transferred to new role as Security Architect dealing with Project Management assignments for Systems Security.

Focus includes:Lead for the Enterprise Security Management Project (ESM). My main responsibility or focus was ensuring that enterprise-wide deployment of Security Management, Compliance Monitoring, and Reporting Systems are implemented. Responsible for making sure that all servers (several thousand), within BANK ONE are implemented with Axent's ESM software. My responsibilities also included managing a total of 24 Managers (servers), which are registered with hundreds of agents (servers) to each manager. Monitored 24 Managers, and made sure that all Lines of Business adhered to registering their servers to the proper designated manager. Responsible in scheduling assessment reports to run for each agent on a monthly basis, create account logins with rights, and also monitor managers in making sure that the Lines of Business servers are in compliance with the Standard Policies that have been implemented by BANK ONE. Updates to BANK ONE Minimum Security Baseline Standards as required. Provided Computer Emergency Response and Formulation of Security Bulletins to all necessary administrators, or personnel in preventing intrusion attacks. I worked with three other team members in making sure that tasks assigned were completed.