Wayne Leitner Email and Phone Number

Assessed global information technology controls by performing audits on 9 financial process areas covering applications, databases, operating systems, networks and information security. Developed audit programs, executed audit planning, risk-focused fieldwork and comprehensive reporting. Served as a thought partner for detecting and actioning potential risks to control objectives and creating reliable documentation.• Provided independent, objective assurance and advisory services of company policies and procedures that assisted the enterprise in maintaining an effective system of internal controls. • Performed IT audits including assessments of change management, cyber security, data privacy, business continuity planning and other related processes.• Contributed to audit planning process through analysis of relevant technologies and associated business risks through review of prior audit reports, internal operational reports, frameworks and regulations.• Executed audit programs and documented work in detailed work papers. Coordinated external audit testing of SOX controls and IT topics. Assisted with special projects and non-IT related audit activity.• Conducted meetings with company personnel to understand functional area processes and gathered evidence. Communicated issues and concerns to audit and business management. Drafted audit findings, recommendations, and audit report.

Participated in annual and regulatory audit plan projects covering Enterprise Infrastructure and Technology Risk Management by supporting planning, driving fieldwork, and assisting with reporting over audit lifecycles. Identified meaningful potential issues about design and effectiveness of controls. Managed auditee relationships and played as member of diverse and collaborative team.• Executed audit planning, risk-focused fieldwork, and comprehensive reporting. Completed tasks on time and within allocated budget, and promptly notified auditor in change of issues that arose. • Understood the financial services industry and assessed the risk and control environment for process within coverage areas. Identified meaningful issues in which controls are not properly designed or are not operating effectively. Worked closely with auditees to verify timely progress and completion of agreed action plans. • Possessed and displayed understanding of audit techniques. Demonstrated strong knowledge of policies and procedures. Independently prepared work papers that fully comply with those policies and procedures. • Participated in continuous improvement initiatives. Aligned risk and control processes into day to day responsibilities to monitor and mitigate risk.

Created Guardium security program for 27 business applications with SOX, PCI, and PII data in 293 Oracle, SQL, and DB2 databases on Windows, Linux, and iSeries platforms. Managed support and evidence for quarterly internal IT audits, semi-annual PwC external SOX audits, annual PCI-DSS audits, and SOX IT general controls self-assessments. Executed ongoing Qualys and Nexpose vulnerability assessment activities and SCCM patching remediations to protect critical enterprise assets.• Attained product compliance by developing roadmaps, process flows, and technical procedures, performing ongoing monitoring and operation of select systems, identifying security events, driving investigation and remediation of alerts impacting technology teams.• Deployed, configured, and administered IBM Guardium Database Activity Monitoring system, including S-TAP agent and GIM installation, appliance patching, and component troubleshooting while supervising outsource teams of professional services and managing services to safeguard corporate data integrity and confidentiality.• Ensured data availability by performing periodic risk and vulnerability assessments using Qualys and Rapid7 Nexpose scanning of database assets and associated server operating systems and executing remediation plan to apply security patches following change management process.• Monitored and enhanced SOX, PCI, and PII controls effectiveness on existing technology platforms through internal and external audits and self-assessments, meeting regulatory framework requirements.• Improved company security posture by documenting and maintaining enterprise class hardening standards for database management systems, including corrective action plans for deficiencies and exceptions.

Administered all aspects of 613 Oracle, SQL, and MySQL databases on Linux, UNIX, AIX, Exadata, and Windows servers servicing departments of Medical Center and School of Medicine computer systems. Provided technical assistance and professional direction to developers in support of health industry, financial reporting, and business intelligence applications.• Protected business continuity through setting up mirroring replication and AlwaysOn availability groups, creating and executing RMAN incremental and cumulative backup shell scripts, authoring and deploying SQL and T-SQL monitor scripts, and performing Disaster Recovery exercises.• Secured availability of information via regular server and client software patching and upgrades.

Supported database administration and maintenance of 334 Oracle and SQL online transactional and data warehouse instances for 24x7 vacation exchange and rentals reservation system that ran on Linux, UNIX and Windows. Resolved urgent technical issues under extreme time constraints to ensure continuous and efficient operation of databases with changing resource needs. Delivered technical assistance and professional direction to SQL developers.• Enforced database security policies and supported internal and external audits, establishing SOX and PCI regulatory compliance.• Safeguarded database availability via timely software fixes and upgrades, maintaining jobs utilizing Net Backup for database backup and restore, documenting and participating in annual Disaster Recovery exercises, and promoting logical and physical design that included storage and capacity planning.• Configured tiered regime, governing database authorization, authentication, and auditing, controlling data confidentiality and integrity.• Improved database security through mandatory production-bound application source code and test case results reviews.

Led staff responsible for all aspects of database administration and maintenance for an internet-based, 24x7 audio delivery system. Managed development, test, QA and production servers with seven Oracle9i databases including two Data Warehouses.Installed and upgraded Oracle server and client software over versions 8, 8i and 9i. Oversaw configuration management including database sizing and file placement employing OFA standards. Created and executed daily RMAN hot backup and monthly cold backup UNIX shell scripts, and performed recovery as required. Deployed Export/Import utilities to load large volume data. Established and enforced database security strategy tailored to each database. Calculated and forecast data storage requirements and affected corrective measures. Provided technical direction to developers and DBAs, recommending actions where required, presented timely status reports and historical statistics to management. Created UNIX shell scripts to automate array of regular activities run from crontab, composed and employed SQL report scripts to analyze and monitor space allocation and performance. Provided project support for new and ongoing applications including Broad Vision One to One e-commerce engine. Involved in logical and physical design, tuned application SQL, analyzed access paths and indices, monitored and tuned overall database performance. Resolved urgent technical issues under extreme time constraints ensuring the continuous and efficient operation of the databases. Ensured the continuous and efficient operation of the databases.

Solely responsible for all aspects of database administration and maintenance for a Check Payment Processing system. Oversaw development, test and production servers with five Oracle7 databases including a Data Warehouse. Monitored and refined overall database performance and performed daily and weekly backups, and recovery as required. Authored and used SQL*Loader to format and load large volume data, deployed Export/Import utilities. Established and enforced database security. Calculated and anticipated data storage requirements and recommended corrective measures. Created Unix shell scripts to automate daily and nightly activities, wrote PL/SQL procedures, functions, packages and triggers. Provided project support for new and ongoing applications, tuned application SQL, analyzed access paths and indices. Composed and employed report scripts to analyze and monitor space allocation and performance. ensured the continuous and efficient operation of the databases.

Responsible for all aspects of database administration and maintenance for an Integrated Benefits Administration system. Oversaw development, test and production servers with eight Oracle7 databases and w rote PL/SQL procedures, functions, packages and triggers. Monitored and maintained overall database performance and tuned application SQL, analyzed access paths and indices. Performed backup and recovery and Import/Export, and used SQL*Loader and Oracle Utilities to format and load data. Involved in logical and physical design and established database security. Provided continuous database support for applications in various database environments. Calculated and anticipated data storage requirements and recommended corrective measures. Composed and deployed report scripts to analyze and monitor space allocation and performance. Resolved urgent technical issues under extreme time constraints ensuring the continuous and efficient operation of the databases.

Participated in the design, development, testing and implementation of a Client/Server-based Shipping Conference Tariff Proposal, Filing and Publishing system. Provided technical direction during feasibility analysis, recommending actions where required. Composed high-level design using Oracle CASE and designed SQL data tables and views. Researched and developed suite of Oracle Forms, used SQL*Loader and Oracle Utilities to format and load data. Wrote PL/SQL procedures, functions and packages, and REXX programs for mainframe-to-server data ETL. Created test and production data environments and conducted unit testing. Presented timely status reports and historical statistics to management. Assisted DBA in database sizing forecasts, tuning and maintenance.Authored user-help scripts and system documentation.Team member involved in the full life cycle of a mainframe-based Shipping Tariff Information Management system.Developed detailed program specifications and wrote PL/I, SQL/DS, CMS and REXX programs. Defined system test plan and program test cases, and conducted unit and system testing. Performed debugging and troubleshooting of system modules, resolved end-user technical questions and difficulties. Authored technical and customer education documentation. Installed and maintained new system in production VM environment.

Functioned in key analyst role in the design, development and implementation of a Part Order Management system. Acted as versatile programmer, filling in slots in development technology and methodology. Performed high-level systems analysis and offered technical alternative to management. Conducted system phase reviews and defined test plan and program test cases. Developed general program designs and designed DB2 tables and views. Formulated detailed program specifications. Wrote PL/I with IMS and embedded SQL programs, and composed JCL and Assembler code. Formulated DB2/SQL using SPUFI and QMF, plus DB2 utilities. Conducted unit testing, and local and corporate systems testing. Installed new system in MVS production environment and authored system documentation.

Solely responsible for design and implementation of a Financial Rates system for New York Life Insurance Co. Gathered initial requirements and performed feasibility analysis. Developed system and program design, formulated detailed program specifications. Made status presentations to management and technical staff. Wrote PL/I programs and composed JCL code. Design and implemented CICS screens and COBOL programs. Conducted unit and system testing, installed new system in production environment.. Authored technical and end-user documentation and coordinated system turnover effort.

Performed lead programmer responsibilities in developing, implementing and maintaining a Customer Account Services Billing system. Wrote PL/I code and generated Module Design Package documentation. Created a test environment and conducted unit and system testing, and installed new system in MVS environment. Maintained new system in production environment, diagnosed and resolved PL/I and JCL problems. Educated and supervised new project members. Conducted user training phase and system responsibility turnover.