Matthew Marcucci Email and Phone Number

• Evaluate existing and newly developed applications and platforms to ensure sufficient SOC1 and firm-wide controls are in place prior to evaluation by our external auditors• Team lead for Change Management platforms and tools, focusing on automation of the end-to-end CI/CD process and the associated change controls such as evidence collection/retention, approvals, etc.• Review lead for additional platform types including access management tools, privileged access and vaulting tools, and 3rd party / external user access• Conduct IT general control (ITGC) testing around the following control domains: access management, privileged access, change management, and computer operations• Host functionality workshops to conduct demos, review code, and better understand the true usage of the tool and how it communicates with other components within JPMC• Create architectural diagrams and user journeys based on feedback from ITGC and functionality workshops to clearly pinpoint where identified controls and gaps exist• Provide recommendations on tactical and strategic solutions to remediate any critical findings and evaluate the deployed fix to ensure it addresses the risk• Partner with senior leadership on a regular basis to build out the SOC1 team’s review pipeline based on resource availability and upcoming releases or priorities for each line of business

● Performed assessments of client systems and current designs to detect gaps in security, compare to industry standards, and identify areas for improvement● Designed, built, and tested new security roles in development systems based on requirements identified by the client and best industry practices● Implemented new security roles in production while maintaining minimum impact to client day-to-day activities● Led teams comprised of internal resources, client resources, and on/off-shore contractors to effectively complete tasks within the scheduled time frame● Developed project plans including timeline, budget, and staffing to effectively complete projects while reducing excess cost and maximizing profit margin● Built internal tools to streamline the project lifecycle, including a design database to present during workshops and a new cyber-security framework for SAP’s solution manager● Assembled training materials on new emerging technologies, specifically around SAP’s S/4 Hana and the Hana database, and hold training sessions for the global practice

• Interacted with clients on a daily basis to obtain testing evidence• Performed tests of design and effectiveness around access to program data, program development, program changes, and computer operations for various applications, including SAP, for the overall financial audit• Maintained tracker of all in-scope applications and controls, including delivery dates, comments, and overall completion status to increase team and deliverable efficiency• Designed and maintained budget tracker for over 10 clients to autopopulate summaries, track actuals, and forecast hours for future periods

• Interacted with clients on a daily basis to obtain testing evidence• Performed tests of design and effectiveness around access to program data, program development, program changes, and computer operations for various applications, including SAP, for the overall financial audit

• Utilized the Caseware application to convert audit operations from a paper to an electronic system• Logged all incoming engagement letters• Contacted clients via confirmation letters to retrieve audit information

• Scheduled site surveys and installations with schools throughout the five boroughs and on Long Island• Utilized the FileMaker Pro database system to enter and manage project data

• Installed computers, printers, scanners, and servers in schools in the five boroughs and on Long Island• Performed extensive work on “Robin Hood” projects installing brand new high-tech libraries in low income areas