Todd Drake Email & Phone Number

San Francisco, California, Us

• Lead engagement activities for control testing audits, project audits, and issue validations• Perform monitoring and testing on high priority issue validations• Report on audit and issue validation status to management and regulators• Implemented and coordinated a Coverage Strategy and Standard Audit Program across audit teams

Worldwide, Oo

• Internal AuditInvolved in internal audit engagements, including both SOX and non-SOX related audits in the Technology, Media, and Telecommunications and Consumer & Industrial Products industries. Audits have included understanding business and IT processes, identifying relevant risks and mitigating controls, planning testing, executing testing, communicating to management and preparing related reports. • SOX Involved in SOX engagements relating to testing of general IT controls and business cycle controls within the Energy & Resources and Consumer & Industrial Products industries. Involvement has included identifying risks and controls that address risk, performing testing, communicating to management and reporting. Audits included testing controls related to SAP, UNIX, Mainframe, and Windows.• SSAE 16 ReportsPerformed SSAE16 SOC 1 Type II attestation procedures for clients in the Financial Services and Technology, Media & Telecommunications industries. Involved in identifying control activities, developing and executing test plans of controls, reporting results to management and completion of required reports. Further, identified that control activities related and satisfied the overall control objectives for each section within reports.

London, Gb

o Identify risks in vital business processes and form controls to help mitigate the risk around key activitieso Test key process controls to evaluate their operating effectiveness in unique business environmentso Collaborate with colleagues in different business areas to produce detailed walkthroughs of vital business processes

Ankeny, Iowa, Us

o Perform risk assessments of IT infrastructure or applications and make recommendations for improvements based on the client’s stated risk tolerance levelso Review and recommend administrative, technical and physical controls to mitigate identified risko Ensure events generated from Managed Security Service Provider (MSSP) monitoring solution are evaluated correctly and acted upon as needed

Audited and recorded processes of the company to ensure transparency across different customersGained hands-on experience troubleshooting various hardware, software, and networking problems in a business environmentCollaborated with businesses to address their IT needs and recommended solutions