Ryan Hash Email & Phone Number

Austin, Texas, Us

Phoenix, Az, Us

Woonsocket, Ri, Us

Leads audit staff in the performance of complex information security audits. Responsible for identifying vulnerabilities in business and IT processes and information systems. Assures compliance with Sarbanes-Oxley, ISACA, COBIT and other industry standards. Performs audits related to information security risk, change management, mainframe governance and security, vendor and contract compliance assessments, corporate mobile device security, Sarbanes-Oxley, and contributes to many others.Performs technical and procedural validation testing of controls, post-implementation reviews, and special projects. Investigates control deficiencies through interviews and root cause analyses. Coordinates and collaborates across the enterprise with Legal Department, Privacy, Compliance, and Information Technology. Prepares, disseminates, and reviews audit reports directly with senior executive leadership and key stakeholders. Promotes internal control and policy enhancements through security education and awareness across the business.

Phoenix, Arizona, Us

Became the first IT Auditor for the Arizona Department of Economic Security, a government entity with over ten thousand employees. For six years, developed all internal IT Audit policies and procedures, built the annual audit plans, designed and implemented all IT Audit programs.Performed detailed technical reviews of department applications, logical and physical access security (including state department data centers), business continuity procedures (including backup and recovery), change management, contract and vendor management, data management and storage.Consulted multiple state and Federal departments, providing responses to IT Audits performed by the Internal Revenue Service and the Social Security Administration. Assisted financial auditors and management analysts with reviews of state single audits.Educated department executive leadership on the applications and benefits of an effective IT Audit program.

Memphis, Tn, Us

Audited against IT policies and procedures as they applied to a national financial organization. Testing included Sarbanes-Oxley 404 requirements, application and IT governance reviews, vendor and contract compliance evaluations. Also examined systems related to nationwide Automated Teller Machines and identified high-risk logical security weaknesses. Contributed to the development of key documents such as the audit manual, audit program templates and audit report templates. Also developed a content directory for a major trust administration program.Gained experience in evaluating business continuity and disaster recovery procedures. This included being chosen to travel to an out-of-state vendor for system-wide backup and recovery, observing a live recovery test, and evaluating effectiveness.