Mari Howe Email and Phone Number

Primary responsibilities include review, impact analysis, and implementation oversight of changes to corporate and information security policies and requirements. Key activities and accomplishments:- support to Consumer Technology teams for all policy related activities- review/analysis of approximately 90 policies this year- conducted impact assessments, including gap analysis, identification of remediation options and management reporting

Served as the COSO/SOX risk consultant for Enterprise Business Technology and Enterprise Database Management groups, supporting and coordinating all COSO/SOX activities for these teams. Key activities and accomplishments include:- Partnering with technology teams to complete COSO program requirements including assessments and testing of application and/or general IT controls.- Provided education, guidance and coordination as new applications and controls were identified by the program to ensure requirements were met.- Supported external audit activities through assessment of evidence collected and demonstration of control processes.- Implemented issue management processes such as identifying mitigating controls, drafting corrective action plans, and ensuring sustainable remediation.

Served as a risk/compliance consultant for the Consumer Lending Technology group. Key duties included:- Support for internal audits, external exams and other IT control testing throughout all phases of the engagements. This involved communicating with technology partners regarding status of the effort and potential issues, ensuring accurate fulfillment of audit requests and demonstration of control functionality, and coordinating issue management processes as needed.- Conducting risk assessments to analyze controls, identify potential gaps and determine remediation.- Led various compliance efforts including segregation of duties reviews, change management control testing, and risk assessments for transitioning teams/applications.

Responsibilities included serving as subject matter expert for the Special Operations group with new software implementations and new policy/process integrations. Key accomplishments included implementation of a front-end system for undeliverable mail functions and conversion to a new check vendor. Efforts included conducting user testing and production check-out and the completion of analysis, reporting, and monitoring of system issues/concerns.

Held positions of Staff Auditor, Senior Auditor, and Senior Audit Project Leader in the Internal Audit team. Responsibilities included planning, executing and supervising community bank and operations audits to evaluate/test internal controls, policy compliance and management of risks. Responsible for written and oral reporting of results to management as well as issue monitoring and validation. Additional experience includes four years of project auditing, focused on acquisition conversions, business process redesign and consolidation projects.