Randy P Email & Phone Number

Dayton, Ohio, United States

• Conduct comprehensive risk assessments to identify potential hazards and vulnerabilities within the center's operations and facilities.
• Develops and updates Standard Operating Procedures (SOPs), System Security Plans (SSPs), and other policies to ensure alignment with industry standards and regulatory requirements.
• Ensuring that all risk management policies and procedures adhere to Department of Labor (DOL) regulations, maintaining a proactive stance on compliance.
• Establishing systems for incident reporting, conduct thorough analyses of incidents, and recommend corrective actions plans to prevent future occurrences.
• Proactively identifying areas for improvement in risk mitigation strategies and recommend enhancements to existing processes, fostering a culture of continuous improvement.
• Ensuring that policies, standards, and procedures is reviewed, relevant and updated.

• Executed day-to-day deliverables that support the ongoing compliance needs as well as any new regulatory requirements.
• Executed ITGCs and IT Application controls (ITAC) testing, determining design appropriateness and operating effectiveness of controls.
• Participated in the evaluation and risk assessment of business and IT processes, to identify risks and development recommendations for remediation.
• Performed compliance IT audits in accordance with COSO and COBIT internal control framework.
• Participated in all phases of IT audit process from planning, fieldwork, reporting and follow-up if required based on the result of the audit work.
• Performed SDLC pre and post implementation reviews, identify control deficiencies and provide recommendations to fix it.

• Conducted periodic reviews of the Third-party risk management programs to identify areas for improvement and help ensure alignment with key business risks, regulatory requirements, and industry frameworks; revised.
• Partnered with 3rd parties to acquire applicable due diligence material relating to service(s) being provided.
• Reviewed due diligence material (policies and procedures, audit reports, certifications, BCP results, network scans, vulnerability assessments, etc.)
• Conducted vulnerability assessments on the organization's infrastructure with Nexpose in configuring and running scans, analyzing scan results, prioritizing vulnerabilities based on risk, and tracking remediation.
• Reported findings and issues to all leadership levels within the organization.
• Effectively tracked inherent risk and residual risk; established repeatable and sustainable processes around risk management of third parties/suppliers to reduce the overall enterprise risk exposure.

Education record

Master Of Science - Ms, Computer Science