I work across teams to improve our SOX security monitoring procedures, and processes to help mitigate risk in the Bank's information security posture. Monitor, analyze and report on SOX controls governing the Identity and Access Management department. Manage projects for the IAM team.

Contractor at FHLBDM (Federal Home Loan Bank Des Moines).I Monitor, analyze and report on SOX controls governing the Identiy and Access Management department.I maintain and improve security monitoring procedures, and processes to help mitigate risk in the Bank's information security posture.Providing knowledge and guidence for the companies RBAC (Role Based Access) implimentation.

Assessed infrastructure and application security to ensure compliance with company standards for new applications and application enhancements. Provided in-depth technical expertise and support to business areas and IT management in risk assessment and the implementation of appropriate data security. Performed Risk Assessment to ensure appropriate level of risk is understood, mitigated, and/or accepted. Assisted with Vendor Risk Assessments as applicable. Provided security assessments of software and equipment going into Voya’s new data center ensuring compliance with company policies and TSS (Technical Security Standards). Conducted Impact Assessments with asset owners to establish applicable confidentiality, integrity and availability ratings. Performs activities including planning, providing technical leadership, and tracking projects and key task dates.

Manage the mainframe and Active Directory security administration fulfillment teams. Provide technical expertise, management communications, planning and tracking projects with other security staff, programmers and technical staff. Communicates with customers and management to ensure customer security requirements are met and in compliance with company standards. Participates with development, maintenance, and testing of operating systems and applications security; reviews existing data systems, security issues, and procedures. Develops processes to ensure security is in compliance with policies and standards. Develop management reporting tools.

Manage/Lead the mainframe fulfillment team.Determine and impliment process improvementsEnsure best practices are followed when creating new RACF resource profiles.Recommend and implement changes to remediate audit findings.Focal for all ID Administration for server/application re-hosting projectsEscalation focal for mainframe fulfillment.Assist auditors with audit evidence and research

Lead the mainframe fulfillment team as we insourced the ID Admin functions.Initiated process improvementsRecommend and implement changes to remediate audit findingsProcess security fulfillment requests on the mainframe platform.Escalation focal for mainframe fulfillment.Assist auditors with audit evidence and research.

Ensure access requests are properly approved before being fulfilled.Review requests to ensure they meet audit compliance standards.Work with managers to determine the most appropriate access to be granted.Assisted in the resolution of escalation/expedite requests.

Administrator of user and data security for Novell NetWare, Windows 2000 Active Directory and RACF. Maintain security for various applications (Ingenium, JDEdwards, Enpres, LifePro, Paybase, etc.). Performed quarterly and semi-annual application / system audits. Work with internal and external auditors on all company IT audits including Sarbanes-Oxley (SOX). Recommend and implement changes to remediate audit findings. Negotiated contracts for the maintenance of the datacenter UPS/PDU and climate control systems. Created processes to handle file transfers (FTP) internal to the company and with external business partners. Maintained the encryption/decryption process for the file transfers. Administration of the Changeman change management system used to control changes to all systems. Assist the team leaders in Help Desk/Operations to resolve critical problems. Monitor and resolve problems with the tape management system CA-1. Provided on-call support for the Security, helpdesk and operations areas.