Patrick Nobles Email & Phone Number

Austin, Texas Area

Primarily responsible to assess, evaluate and make recommendations to management regarding security controls for vendors, applications, and supporting infrastructure. Provide guidance on internal and external audit response pertaining to SOC1|2, ISO 9001, ISO 27001 and GDPR. Primarily responsible to improvement and maintaining of information security policies, standards, and control procedures to ensure compliance with applicable regulations and industry standards. Upload security policies, standards, and control procedures to Agile document repository. Defined and manage policy and vulnerability risk exception process. Identify opportunities to drive information security risk posture and enhance process improvements. Collaborated with other organizational business units to identify and manage security risks and attack vectors. Utilized Thycotic (Secret Server) and an Administrative capacity to safeguard business critical secrets. Utilized TenableIO (Security Center) Administrative capacity to scan infrastructure to identify exploitable risks and threats. Perform preproduction risk assessments of all cloud-based applications and systems to determine and assess compliance with applicable regulations and industry standards. Monitored and maintained Test Track Pro (TTP) to mitigated outstanding risks. Maintain and track vulnerability issues with in ServiceNow ticketing system. Provide reports to management regarding critical vulnerabilities, their severity and the potential to impact the organization.

Responsible to perform maintenance of all company workstation, servers (both physical and virtual), and all other related IT systems and infrastructure at multiple facilities. Troubleshoot and resolve hardware, software and network (Ethernet and Wireless), and operating systems issues, to include workstations, servers (both physical and virtual) and all other related IT systems and infrastructure at multiple facilities. Responsible to install workstations, connect and set up hardware, install required software at multiple facilities. Build and install rack mountable servers. Build and deploy virtual servers into corporate environment using various VMWare products. Configure all servers and workstations for optimal performance. Maintain all networking infrastructure, to include Cisco routers, switches, hubs and Cisco firewalls and backup associated configurations. Establish network accounts through Active Directory, email accounts using Office 365, DLP filtering, remote access accounts and establish password requirements. Update and maintain Active Directory, Group Policies, Security Groups, DNS, DHCP and TCP/IP services. Maintain current and accurate inventory of technology hardware, software, licensing of IT resources at multiple facilities. Utilize various tools to monitor workstations, servers (both physical and virtual) and all other related IT systems to ensure maximum access and reliability and uptime at multiple facilities. Identify problematic areas and implement strategic solutions in timely manner with minimal direction from management. Work with other IT staff to resolve end user vulnerability issues. Initiate and work requests for services on all installed equipment. Implement network and logical security at multiple facilities. Deploy and maintain anti-virus software (McAfee ePO).

Provide technical expertise regarding security practices. Assist with development and revisions of security policies and procedures. Ensure that appropriate compliance assessments are conducted. Coordinate the HIPAA assessment efforts with application owners. Provide forensic analysis in response to Information Security incidents. Analyze and advice on security audits and test results.Review of firewall modification exceptions to ensure compliance with security policies. Monitor and coordinate badge access request. Perform security audits as requested and report results. Analyze chain of events and applies technical knowledge following established procedures. Participates in design, contributing technical insights and ideas. Helps formulate project scope and objectives.Work effectively on a continuing basis with customers to understand and explain business and technical issues, explain new technologies, and presents deliverables.Performs other duties that may be assigned by AHIS Leadership

Primary responsibilities are to identify, analyze and evaluate Information Technology risks and to strengthen internal controls related to Sarbanes-Oxley. Responsible for creating and maintaining Sarbanes Oxley audit controls, including testing, remediation, training and documentation. Provide input to testing strategy and develop deliverables in support of a testing plan. Review and administer a comprehensive and repeatable set of test plans. Performing IT control assessments, document test requirements, and suggest remediation alternatives where applicable. Execute test plans that include Inquiry, Observation, Inspection, Documentation Review, and Physical Inspection. Document test results and substantiate all findings with complete work papers and supporting evidence. Work closely with business unit representatives to understand business processes. Provide support to internal and external auditors. Provide status updates to the CIO, VP and Controller.

Perform technical audit work in the Internal Audit department in accordance with GAO, ISACAs COBIT framework, GAAP, NIST, IIA, Sarbanes-Oxley, and other Auditing Standards. Use independent judgment in the following areas of compliance auditing, security auditing, risk assessment, and vulnerability mitigation and remediation. Responsible to examine, investigate, and review agency records, reports, financial statements and management practices to ensure legal and regulatory compliance with state statutes and internal/external regulations. Perform program audits for efficiency, and effectiveness. Responsible for information systems analysis, business process analysis, contracts and monitoring projects. Provide knowledge of agency budgetary controls, and administrative procedures and related state and federal regulatory laws.

Responsible for all auditing activities related to the agency's Information Systems Division. Performed complex, advanced audit work related to agency IS functions using professional IIA and COBIT standards. Responsible to monitor and report on the progress of the agency’s system redesign Business Process Improvement initiative. Responsibilities include developing an annual divisional audit plan, planning and performing audits under the divisional audit plan, assisting other internal auditors with audits of their assigned divisions, providing CAATs support and ACL assistance to internal audit staff when necessary, preparing audit report drafts, and presenting the results of divisional audits to divisional management, the Executive Director, and Commissioners. Served as Internal Audit's primary liaison with IS and BPI divisional management. Provided the Director with status updates for audits in progress and BPI status.

Assist in the preparation of application systems project plans and schedules, relative to database-related design, development, implementation and support. Communicate regularly with internal technical, applications and operational staff, as appropriate, in order to ensure the database integrity, security and availability. Define both logical views and physical data structures. Replicate databases and perform day-to-day database administration tasks. Perform backup and recovery procedures and system tuning. Coordinate testing activities with appropriate application development team with Database Administrator(s), as required. Troubleshoot database problems and maintain system database. Install new database system releases. Verify test results against expected results.

Provides guidance and leadership in development and implementation of Information Systems Quality Program. Development of the Quality Program to include standards, practices processes, document formats, and definition of authority and responsibility essential to achieve high quality information technology products. Develops and implements quality methodology and reports for effective implementation of the Quality. Participates on teams, committees, or workgroups to promote and ensure that the quality assurance policies, procedures and standard are considered when planning development projects. Responsible for preparation of reports, case studies and research to assure effective and consistent reliable of quantitative measurements and techniques for measuring software quality are met. Evaluates research findings to determine the nature and extent of compliance with quality policies and procedures in development projects. Develops and coordinates special projects.

Ensured that the logical and systematic conversion of customer or product requirements into total systems solutions that acknowledge technical constraints. Developed reliable, real time, control system software in multiple programming languages. Handled testing results as required for product development and release. Responsible for development, unit test, integration of patches and enhancements, including porting into several concurrent baselines. Responsible for performing functional testing and support of multiple platform systems and servers. Address computer hardware/software and internal and external component trouble-shooting. Performed audits of multiple platforms (desktop, laptop and servers) and operating systems functionality. Performed time line analysis, and requirement allocation and interface definition studies to translate customer requirements into hardware and software specifications.