The Information Technology Staff Auditor is responsible for auditing global technology processes and information security controls for all UPS business entities. This person is responsible for identifying various IT risks regarding the general computer control environment. They perform testing of the IT control environment regarding networks, operating systems, databases, computer operations, data security administration, and data center physical security. In addition, testing of business cycle and IT application controls is required. The testing is performed for Sarbanes -Oxley, as well as risk based IT audits.

• Supported client engagement team in developing a product mapping focused on aligning applications with associated products to assist with operational recovery efforts• Developed a product scorecard to support application teams in understanding security issues and to track remediation • Analyzed scanning tool results focused on identifying hard coded credentials within product source code. Identified false positives and prescribed updates to better refine scanning capabilities to improve finding accuracy• Reviewed and updated PwC tools and templates to be used in future projects focused on improving engagement efficiency