I am a member of EY's Financial Services Organization, with a concentration in technology risk and assurance services. I have over twenty years of experience in information technology auditing and security and risk management. I have experience identifying risk, designing and testing Information Systems controls for integrated audits of financial statements and internal control over financial reporting, as well as, auditing various aspects of information technologies, including information-processing risks associated with business processes, and information system controls regarding the accuracy, completeness, and integrity of data and transaction processing for clients in the banking and capital markets, insurance, and wealth and asset management industries.

• Developed, maintained, and enforced corporate Information Security Policies and Procedures.• Developed and implemented an internal control structure for administering and maintaining user access to SDSI’s banking applications.• Developed and implemented an automated security tool for monitoring security changes and violations associated with SDSI’s primary banking application.• Responsible for monitoring various operating system and application system logs.• Planned and participated in several disaster recovery tests.

• Performed IT security and control audits and consultative reviews for various clients primarily in the financial services and healthcare industries. • Performed over 50 internal audit-related general, application, and infrastructure control reviews and SAS 70 assessments for a banking institution with consolidated assets in excess of $80 billion.• Completed various independent projects including: developed methodology for auditing web-based applications and web-hosting infrastructure, and designed and developed Microsoft Access-based gap analysis, IS policies and procedures management, and risk management tools for various clients.