Thomas Donaldson, Cissp, Cisa Email & Phone Number

Pittsburgh, Pennsylvania, United States

Warrendale, Pennsylvania, United States

Warrendale, Pennsylvania, United States

Warrendale, Pennsylvania, United States

Pittsburgh, Pennsylvania, United States

Pittsburgh, Pennsylvania, United States

Implemented the Application Access Controls Governor Oracle Governance, Risk and Compliance (GRC)Developed a standard set of reports within Oracle GRC that identified segregation of duties conflicts by user and within responsibilitiesWorked with plant controllers, IT managers and Business Intelligence to develop a procedures to identify and mitigate segregation of duties conflicts in order to achieve SOX compliancePerformed as the Team Lead for enforcing segregation of duties and standardization within Oracle user responsibilities and access menus for new Oracle 11i implementations via use of SWIFTsuite Configurator

Supported the Model Audit Rule (MAR) compliance initiative from an IT general control and automated application control perspectiveDeveloped a standard methodology that was used by the staff auditors for the testing of automated application controlsTasked with bridging the IT general control risk and control environment knowledge gap between the external consultants and the Financial Support Project Management OfficeProvided training sessions to IT management regarding the MAR compliance initiative and our approach to documenting, testing and reporting the effectiveness IT control environment at Highmark and its subsidiariesPerformed financial report and spreadsheet validations in support of the MAR operational audit team

Developed the risk criteria and scoring for the IT portion of the annual risk assessmentCreated audit work programs for all IT related audits utilizing the COBIT frameworkPerformed as the lead auditor which required the review of staff work papersComposed the IT audit reports that were submitted to the Audit Director for distributionIdentified an area of risk and proposed remediation procedures that were adopted by the Privacy and Compliance group Developed a training program for auditing an Oracle Database

Performed as the lead staff member on several SOX attestation, IT advisory and SAS70 engagementsIdentified as a subject matter professional for audits involving Oracle Financials and Oracle Database Assisted Audit Managers in the scoping and planning of IT advisory audits and completing the appropriate engagement project management work papersPerformed as an on-boarding coach for several new hires to the KPMG Pittsburgh office

Performed as the team leader of the general ledger, project and fixed asset accounting for Alcoa Consumer Packaging Group and advisor to Primary Metal GroupInvolved with implementation of other Oracle modules including Oracle Production Management, Rec-to-Pay and Order-to-CashReviewed the status of daily interfaces into the general ledger and developed corrective solutions for data that was not interfaced to the general ledger appropriately including adjusting account mappingEvaluated ledger processes for opportunities to automate or modify the processes to improve efficiency, control and cost effectivenessInsured that adequate controls are established and adhered to for the locations for which I am responsible and assure that both internal and external accounting policies are followed for ASAT and SOX complianceDeveloped Access queries for the general ledger group to query inter-company charges and warehoused ledger data

Developed Access queries to analyze various financial data including incorrect pricing tables Reported monthly profit/loss and account analysis to Vice President of FinanceAssisted Financial Planning with budgets and budget variance analysisPerformed financial analysis for management and other personnel

Compiled investment statements and reconciled investment accounts for various companies

Master Of Science - Ms, Management Information Systems, General

Bachelor Of Science, Accounting