Timothy Mathis Email & Phone Number

Dfw

Senior RACF Consultant for RSH Consulting, Inc., a firm specializing in security for IBM z/OS mainframes. Assisted clients with evaluating and enhancing RACF controls. My IT career spans 40 years including 29 years in IT security working primarily with RACF, 8 years in IT auditing, and 3 years in programming. I'm especially adept at redesigning and refining RACF implementations using role-based access control (RBAC) concepts.Participated in a detailed RACF assessment for an international food and beverage manufacturer. I collected all the RACF and z/OS configuration data needed for the review and assessed MQSeries profiles, Started Task authorities and Global Access Table entries. I had a crucial role to merge the RACF databases of a Fortune 500 Payment Card Industry firm to support a sysplex consolidation project. This complex undertaking required the migration of unique profiles from one database to another and equalization of profiles common to both databases. I addressed the migration and equalization of most of the general resource profiles and assisted with all other merge tasks.Helped a Fortune 500 client prepare their 15 RACF-protected sysplexes and 31 Unix File systems for the upcoming phase-out of the IBM RACF Unix Default User. This was all done without any impact to the client.

Plano, Tx

15+ years as lead security specialist for 15+ RACF databases consisting of 185k users & 100k resources.Completed the following high visibility projects:• Assisted Tech Serv with design & implementation of network security database interfaces to RACF for handling user id maintenance. • Assisted Tech Serv with design & implemented setting up RACF dataset “protect-all” processing for 25 RACF databases prior to IBM providing support.• Project lead to setup all CICS & IMS transactions for 25+ RACF databases.• Project lead to setup all IBM MQSeries queues & functions on ten databases with “protect-all” installed for all MQSeries.• Assisted Tech Serv w/design & implemented setting up RACF profiles for started tasks prior to IBM support.• Project lead to setup DB2 objects on 10 databases with “protect-all” installed for many classes.• Project lead to extract RACF SMF activity records & RACF database into DB2 prior to IBM product offering.• Created 200+ queries using RACF profile information in support of PCI & SOX reviews.• Assisted internal & external auditors as well as clients with SOX & PCI reports.• Conducted SOX & PCI periodic reviews for business applications.• 3 years as lead specialist supporting user & group security database interface to UNIX. Assisted Tech Serv with designing, testing & implementation of security interface to 400 UNIX servers.• 15 years lead security support specialist for HP Non Stop cpus. Responsible for user, group & object protection on 4 machines.• 15 years lead security support specialist for AS400 cpus. Assisted Tech Serv team w/design, testing, implementation & training of auto interface for user & group provisioning.• Conducted SOX & PCI review of applications & reported results to IA.• Assisted Internal Audit with AS/400 O/S review. Created audit program & scope. Reported findings to mgm't.Credited with saving the company from having to expand staff by automating numerous manual IT security tasks.

Irving Tx

Caltex is the world's largest privately held oil company.Conducted internal audits of information systems including an audit of the Accounts Payable system in the corporate and Capetown South Africa offices.Supported internal audit staff with computer software support in order to gather information from application systems to aid in internal audit reviews.Trained other internal auditors how to use computer software tools to gather information from application systems.

Plano, Tx

Responsible for bi-annual audits of data centers (23) and business applications including Payroll, Accounts Payable, Credit Processing and General Ledger. Created audit programs, scoped engagements, directed staff, presented findings to senior level management and conducted followup reviews to ensure findings were corrected. Assisted Credit Internal Auditors with report extracts to aid in their audit efforts.

Wrote Peat, Marwick, Mitchell & Co 2170 software programs for Internal Audit group. The outputs of these reports were used in savings & loan branch location audits and application reviews.Assisted in surprise savings & loan branch audits.

At the time, this was the largest savings & loan in Texas. I was a programmer responsible for maintenance of the savings account application. I also made minor changes to the online savings account application that was used by DFS&L along with twenty other third party S&L's serviced by DFS&L.

Designed application for Nacogdoches County Voter Registration. Maintained banking application software and provided minor enhancements.

Operated computers for service bureau processing business applications for thirteen banking institutions in east Texas.