IT COMPLIANCE AUDITOR Career Overview I offer 15 years' experience various areas Information Technology Field. Including five years experience installing, configuring, troubleshooting computer software hardware problems. Five years experience managing software licenses/compliance, coordinating purchases major projects volume license contract negotiations. Five years experience IT Compliance Auditor I executed PCI\SOX Audits provided corporate governance. Qualifications Certified Software Manager (CSM) (SIIA) Certified Information Security Auditor ISACA, License 1191038 Current MCP-Windows 2000 MCP ID 2797345 2000 Server Administration Network Infrastructure AFFILIATIONS Information Systems Audit Control Association (ISACA) Software Information Industry Association (SIIA) Work Experience IT Compliance Auditor 01/2010 Current Company Name City State Provide value-added control assurance/governance relates security, e-commerce industry compliance requirements controls. Liaise Information Technology Operations areas proactively assess security policy compliance monitor risk Coordinate external/3rd party auditors, including PCI DSS, SAS 70, Record Retention, Business Process Improvement reviews Manage internal IT audit engagements including: system platform audits, PCI Compliance Readiness reviews, IT Risk Assessments, change management, business process control assurance Manage security control assessments Payment Systems merchant boarding settlement funds. Coordinate perform compliance audits accordance information protection, data asset threat provisions Sarbanes-Oxley Acts. Coordinate Incident Response teams post-event diagnosis, investigation documentation. Evaluate information protection governance framework ITIL, FFIEC, COBIT best practices. Provide effective project(audit) guidance leadership team members management relates data security industry compliance Assisted implement policies information asset protection, operating system platform security, network security, acceptable computing resource use Coordinated business organizations ensure implementation proper controls maximum security minimum impact functionality purpose Performed information security risk assessments compliance audits information security processes regarding AS/400,AIX Windows Evaluated AS/400 system security values, UNIX system security files, RACF SETROPTS parameters, Windows user workstation policy settings, firewall rule-set parameters, router configuration files. Evaluated network vulnerability, malware, port uses Monitored compliance organization's information security policies procedures among employees, contractors, alliances, third parties. Assisted creation roles responsibilities matrix SAP user profiles authorities based functional groupings Performed IT audit portion internal audit department Annual Plan. Execute audits, activities, projects, special services fulfill Annual Plan commitments. Performed hands-on analysis multi-platform application security. Ensure IT policy procedures documented updated according regulatory standards, deadlines met, approvals obtained, guidelines followed, repository usage understood, repository system record up-to-date defined IT Governance program Interfaces internal external requestors escalated point reviews IT artifacts completeness satisfaction delivery quality services regarding important issues priorities, deadline-sensitive information. MIS Technology Procurement Analyst 06/2005 Current Company Name City State Incorporated corporate wide procedure ordering software every order tied license, purchase order install point. Instituted stricter software installation procedures help insure licensed software installed company computer. Incorporated additional Software Media Control Retired obsolete workstations software packages implementing PC Refresh Program Standardizing software titles. Created software inventory repository utilizing Microsoft's Share Point Responsible managing technology purchases licensing activities. Centralized streamlined technology purchasing activities across JAG improve speed, reduce costs, ensure proper record keeping fixed assets software licensing. Maintained License Compliance International Domestic offices Created enforced Security policies, Procurement policies Compliance policies Configured Triactive discovery tool, performed software metering tasks Negotiated million dollar contracts vendors IBM, Microsoft, McAfee, Symantec etc. Lead contact Multi-Million dollar SIIA software Audit I saved company 9.2 million dollars. PC\LAN Support Specialist 01/2000 06/2005 Company Name City State Configured troubleshot Internet connectivity network related issues via TCP/IP, DNS, WINS, DHCP, SMTP Windows machines Trained new employees install, configure, troubleshoot customer equipment. Familiar trouble ticketing system (Magic) support tracking customer problems corrections. Serviced, configured, upgraded, repaired Compaq HP computer equipment. Supported Office 97/2000/XP, Outlook 97/98/2000, Adobe Acrobat, Internet Explorer, IBM AS400 Client Access end user "shrink wrap" applications along many homegrown applications. Instructed remote users configure machines remote access use, supported VPN remote access. Handled remote access issues connectivity, modem, token authentication issues. Familiar HP Print Server Appliances HP Jet Admin Created required Domain, Email Novell user accounts KIX scripting Lead tech Novell migration Windows servers Managed Moves/Adds/Changes Customers hardware Worked Symantec Ghost perform larger roll outs create company-wide standard image Worked Remote Control Software DameWare Utilities VNC Viewer. Installed, configured supported blackberry's Performed file restores system backups using CA ArcServe. Education Training Certificate Completion -MSCE Prep Course 2003 New Wave Technology Associate Degree Networking Technology 2003 Bucks County Community College Networking Technology Skills Adobe Acrobat, AIX, ArcServe, AS/400, AS400, business process, Business Process Improvement, change management, Compaq, CA, hardware, contracts, Client, delivery, DHCP, diagnosis, DNS, documentation, e-commerce, Email, firewall, fixed assets, functional, funds, Ghost, HP, IBM, image, Information Security, Information Systems, Information Technology, Internet connectivity, Internet Explorer, inventory, ITIL, KIX, leadership, Magic, managing, McAfee, Access, MCP, Office 97, Outlook 97, Windows, Windows 2000, 2000, 98, migration, modem, network security, Network, Novell, operating system, PCI, policies, processes, Procurement, purchasing, quality, RACF, record keeping, router, SAP, Sarbanes-Oxley, SAS, servers, scripting, SMTP, software installation, Symantec, TCP/IP, troubleshoot, UNIX system, Utilities, VPN