Matthew H. Email & Phone Number

United States

Houston, Texas, United States

- Oversee customer facing audits dealing with global regulatory security compliance in AMER, EMEA, and APJ.- Create and execute a strategy for Okta Security's customer audit program, maintaining stakeholder relationships.- Collaborate with compliance teams to develop artifact repository for third-party risk audits.- Develop trust with customers and lead material presentations to resolve security risk concerns.

Remote

- Autonomously led multiple IT General Control assessments to mature control design of systems used in financial reporting. - Co-Led the SOC 2 initiative to achieve a clean report while preparing for future state changes that impact the compliance program.- Collaborated with Information Security, Information Technology, and Finance on a routine frequency to help process design, risk impact, and documentation for new and inflight projects.- Spearheaded GRC tool business case and feasibility to enhance Internal Audit and GRC functions.- Produced documentation mapping end to end billing process for Finance Team (QTC, Usage, Collections, Pricing)

Houston, Texas, United States

- Led the annual Internal Audit planning process for the Institutional Markets business line within Life & Retirement. - Oversaw the execution of risk based internal audits focusing on an agile audit methodology while managing a team of 3-5 members.- Designed with cross-functional teams the creation of Robotic Process Automation (RPA) library to mitigate and identify trends continuously.- Executed real time integrated reviews with project implementation teams to proactively address their operational risk. - Led process design initiatives for the Institutional Markets business line in prep for Life & Retirement business line IPO. - Collaborated with C-Suite and Executives on how Internal Audit could align with their business and help. - Led quarterly Internal Audit all hands 'Business Updates', presenting business unit specific information and knowledge transfer across the Life & Retirement Internal Audit department and how Internal Audit sees impact.

Houston, Texas Area

- Executed various readiness assessments to identify current controls, gaps, and improvement opportunities (configuration and process based) for service (SOC1 and SOC 2) and user / customer companies whom leverage cloud-based platforms (AWS, Azure, and Oracle Cloud Infrastructure).- Collaboratively managed relevant risk assessments for the continual identification and ongoing management of compliance needs for the technology aspects of clients business.- Managed and monitored overall engagement lifecycle and other key components as it relates to various engagement types.- Spearheaded the resolution to problems, questions, or non-compliance issues received as applicable.- Led regulatory and compliance audits based upon a comprehensive understanding of risks.- Led various SOC2 engagements related to Software as a Service (SaaS) and Platform as a Service (PaaS) companies within the Healthcare, Financial Markets and Payment Processing, Communications, Insurance, Business Intelligence and Data Hosting industries.- Prepared documentation and reports which effectively communicate the compliance alignment to regulatory standards.- Prepared engagements and audit plans, which aim to understand the specific risks needing evaluation.

- Served a wide field of Service Organization industries from small business to international corporations. - Managed engagements from start to finish, including planning, execution, budgeting and reporting.- Effectively managed staff and senior associates during engagements and provide constructive feedback, guidance, coaching and technical training.- Maintained and manage relationships with the client at the appropriate levels- Evaluated process risks, develop tests for key controls, write audit reports and determine effectiveness of controls.- Recognized relevant control risks from detailed analysis and identify potential non-compliance to standards.- Stay abreast of the current IT environment and industry IT trends relevant to client's business, and use current technology and tools to enhance the effectiveness of deliverables and services.- Ensured integrity, confidentiality and availability of information and resources.

Houston, Texas Area

- Served as the IT Subject Matter Expert for a Top 5 global oil/gas company for technical engagement surrounding 3rd party vendor services.- Led annual SSAE16 SOC2 engagements related to Security and Availability for a major technology hosting company.- Led agreed upon procedures (AUP) audits against security objectives for a major hosting company which provides application support services to financial institution customers. - Executed various IT risk analysis exercises to identify current controls, gaps, and improvement opportunities (configuration and process based) for service (SSAE 16 / SOC1 and SOC 2) and user / customer companies.- Executed AUP audits against the Federal Aviation Administration’s security requirements involving a major US airline Aircraft Situation Display to Industry (ASDI) system. - Led various IT internal audits of multi-party ecosystems (internal IT and outsourced / third party IT service provider) focusing on IT operational process and risk-control improvements, risk identification, and safeguarding sensitive information.- Led technical engagements for energy companies, focusing on hardening virtualized server environments and Oracle database management systems critical to business operations.- Planned and led an engagement to design and implement SOX controls for a company’s initial public offering (IPO), project managing all phases to on-time delivery and achievement of risk management and control objectives. - Participated in a number of external audit engagements related to Internal Controls Over Financial Reporting.- Led multiple IT Governance engagements focusing on improving IT organizational processes with a common risk control framework focusing on risk management, management of security incidents, policies, roles and responsibilities, third party management, and strategic planning and budgeting.- Industry Experience: Oil/Gas, Energy, Banking & Finance, Retail & Commercial Sales, Aviation, Web Hosting.

Houston, Texas Area

- Assisted in the review of operational, financial, and technology processes to provide management with an individual assessment of business risk, internal control, and the overall effectiveness and efficiency of the process as well as the risks associated with Sarbanes-Oxley as it pertains to internal controls.- Assisted with the development and implementation of Business Recovery and Continuity Plans.- Worked with BAS team to identify and resolve client issues discovered during audit and review process.- Maintained a good working relationship with clients and work effectively with client management and staff at all levels to gather information and to perform BAS services.- Gained understanding of client operations, processes, and business objectives, and utilize that knowledge on engagements.- Industry Experience: Oil/Gas, Food/Beverage, Local Municipality, Energy.

Houston, Texas Area

- Rebuilt under-performing IT department by developing short and long term strategies.- Aligned IT with corporate goals by increasing ROI.- Increased security and reduce risk by re-engineering server fault tolerance, disaster recovery, and offsite data storage procedures.- Implemented various software programs, including SharePoint 2010, by focusing on project life cycle.- Managed IT needs for 250+ employees with an emphasis on reducing troubleshooting time to improve efficiency.- Evaluated, tested, and conducted software installations, maintain and support hardware/software in a networking environment.- Mentored and coached IT associates to maintain department standards with a focus on performing above expectations.

Mba, Management

Bba, Business Administration And Computer Information Systems