Timothy H. Email & Phone Number

Baltimore, Md, Us

Owings Mills, Md

- Managed firmwide SOC 2 audit program, including the relationship with the independent audit firm, the annual establishment of an audit engagement agreement, and management of $240,000 in audit fees- Executed day-to-day SOC 2 audit operations including intake, review, and fulfillment of audit documentation requests by engaging throughout the firm, including Legal, Compliance, Security, Technology, and Risk- Led working group to evaluate technological and operational impacts from the Retirement Plan Services (“RPS”) strategic partnership and its resultant technology and personnel migration- Identified internal controls impacted by the RPS strategic partnership and led efforts to unify RPS SOC 1 audit engagements under a single audit firm, build out a new RPS Technology SOC 1 audit report, and develop a vision for the future of the RPS SOC 1 program- Consulted with senior Individual Investor (“II”) management before, during, and after a recordkeeper conversion of the College Savings business to a new strategic partner- Guided senior II leadership and Legal on Master Service Agreement terms with a focus on ongoing SOC 1 and SOC 2 audit requirements for College Savings Plan clients- Advised College Savings leadership and relationship management on updates needed to client contracts and participated in discussions with the State Treasurer’s office- Defined functional requirements to support automation efforts for terminated workers’ network account monitoring controls, including liaising with Security, Human Resources, and Risk Management- Evaluated IT General Control attestations for new and existing applications to ensure applications were appropriately subject to internal control and policy requirements before approving- Approved temporary privileged access requests to support deployments of new applications and upgrades, commensurate with internal controls over segregation of duties in the change management process

Owings Mills, Maryland

- Coordinated discussions and walkthroughs to identify existing internal controls and establish new controls as appropriate before beginning SOC 2 audit program- Facilitated SOC 2 audit firm evaluations and selection with SOC 2 Operating Committee- Liaised between auditors and control owners to begin SOC 2 reporting periods beginning April 2018 with Security & Availability control categories and established a timeline for adding Confidentiality controls- Evaluated existing technology controls supporting the worker offboarding process- Supported the establishment of a periodic review of inactive user network accounts verifying need of the account- Championed the automated disablement process within Security for any user network accounts with extended periods of inactivity- Designed and implemented a monitoring control for terminated workers’ network accounts to identify and correct any inappropriate or high-risk access

Baltimore, Maryland

- Coordinated day-to-day operations of external IT audit team for a complex, multi-faceted healthcare provider, including test of SOX IT General Controls (ITGCs), Application Controls, and SOC 1 business process controls over behavioral health claims adjudication and pharmacy rebate operations- Communicated control deviations to management, and oversaw evaluation of the sufficiency of remediation efforts performed by management- Facilitated scope decision-making process with client’s Internal Audit department and multiple business units for a SOC 2 and HITRUST pre-assessment, identifying 30 in-scope applications; directed walkthrough meetings for all IT processes for each in-scope application- Led remote team during the testing phase for a first year SOC 2 report over Security, Availability, and Confidentiality- Provided remote team with framework to execute a controls-centric SOC 2 audit approach in order to reduce documentation redundancy and increase SOC 2 audit efficiency by at least 25%; framework subsequently implemented on additional clients, including a multinational financial software company- Operated in a managerial capacity to support remote team members for a Data Center Colocation SOC 1, SOC 2 Security and Availability, and SOC 3 reports- Recognized quarterly for providing impactful on-the-job coaching to other team members- Fostered relationships with client personnel in order to facilitate timeliness of audit procedures and improve client perceptions of the audit team

Raleigh-Durham, North Carolina Area

- Executed ITGC and Application Control audit procedures, including walkthroughs and testing- Identified and communicated control deficiencies- Coordinated execution of work with offshore team members, including providing timely review and feedback- At a contract research organization, led ITGC and Application Controls testing in an Internal Audit capacity, focusing on timely execution in order to support external auditor timelines and methodology- At a telecommunications company developed a controls-centric framework to execute data center SOC 2 walkthroughs and testing, in order to reduce documentation redundancy and inconsistencies

Wilmington, North Carolina Area

- Served as a resource for students in the MSA Systems Assurance and Business Database Systems classes- Assisted MSA Internship Director with campus recruiting efforts as needed- Collaborated with faculty to determine a research topic, resulting in a year-long research project and paper on the topic of Billable Hours- Developed computer-based learning tool to reinforce research topic

Wilmington, North Carolina Area

- Temporarily updated Parish and School web sites with weekly information received from stakeholders

Raleigh-Durham, North Carolina Area

- Digitized high-complexity system interface diagram for a large public manufacturing firm- Performed internal and external IT audit procedures over ITGCs and Application Controls

Wilmington, North Carolina Area

- Designed monthly productivity calculation system for ACT Medical Group, PA- Performed monthly bank reconciliations for greater than $1.5M in monthly cash receipts and disbursements- Uncovered approximately $500,000 of unmaintained billings in Accounts Receivable- Posted daily cash receipts to the General Ledger- Ensured proper maintenance of Accounts Payable- Processed monthly payroll data for over 150 employees- Audited monthly expense reports and company credit card statements

Wilmington, North Carolina Area

- Served as the hotel's primary point of contact during third shift when no other employees or managers were on-site- Ensured timely information flow between all hotel departments to maximize positive guest experiences- Audited weekend room, tax and incidental charges; ensured proper accounting of room inventory- Restocked Suite Shop inventory to maximize sales potential

Wilmington, North Carolina Area

- Served as the hotel's primary point of contact during third shift when no other employees or managers were on-site.- Served as on-site resource for Regional Sales Team- Created custom room booking webpages for weddings, meetings, conventions and other events staying at the hotel- Demonstrated exceptional interpersonal skills to deliver superior customer service- Coordinated with other departments to maximize efficiency and guest satisfaction- Compiled and evaluate statistics for General Manager’s quarterly reports

Wilmington, North Carolina Area

- Determined inventory needed for regular orders- Sold regular inventory and handled ordering of custom items- Aided Council Registrar with membership data input

Master Of Science (Ms), Accountancy

Activities and Societies: Beta Alpha Psi, MSA Association

Bachelor Of Science, Business Administration; Accounting & Management Information Systems

Activities and Societies: Beta Alpha Psi Accounting Honor Society, Information Systems Association- Vice President of Website for Beta.

Associate Of Arts, Business Administration

Activities and Societies: Phi Theta Kappa

High School Diploma