INFORMATION TECHNOLOGY AUDITOR Skills PeopleSoft HCM 8.8/9.x, PeopleSoft Financials 8.8/9.x, PeopleTools 8.51/ 8.54, SQL Developer, MS Office, Visio, MS Project, Dell Stat 5.6/5.7, SQL Developer, Application Designer, Putty, SharePoint, HP Application Lifecycle Management, Oracle Enterprise Manager, STAT Admin, TOAD, Service Now, Remedy, Heat, Oracle E-Business, Asset Suite 8. Experience 10/2016 Current Information Technology Auditor Company Name － City State Participate annual risk assessment audit planning process covering IT, financial, operational, contract areas. Assist IT audits reviews including user access, database service configurations, security, policy procedural compliance. Perform IT project pre post audit assessments. Participate external cyber related audits assessments. Assist IT portion annual assessment internal controls financial reporting (Sarbanes Oxley SOX). Includes risk assessment, control walkthroughs, control testing, remediation assistance, report results IT management management, collaboration external financial IT auditors. Consult IT matters within non-IT focused audits reviews performed internal audit. Assist consult IT management upgrades, implementations, action plans resulting various audits assessments. Assists provides support others auditing Association needed. Train educate members internal audit team personnel IT audit methods emerging IT risks. Coordinates work internal auditors assigned assist special/complex audits. Adhere company policies, programs procedures well Critical Infrastructure Protection (CIP), Western Electricity Coordinating Council (WECC), Federal Energy Regulatory Commission (FERC), North American Electric Reliability Corporation (NERC), Midwest Reliability Organization (MRO) standards Equal Employment Opportunity (EEO) laws regulations. 04/2015 10/2016 PeopleSoft Security Administrator III Company Name － City State Work closely internal external audit department provide reports documentation compliance. Perform user access recertification, operational audits, quarterly performance assessments Segregation Duty /SOX controls compiling distributing monthly quarterly user access reports. Provide functional expertise guidance developers technical solutions modules PeopleSoft Core Financials, applications. Provision user security PeopleSoft Financials. Ensure appropriate roles, permission lists, row level security exists functional areas. Create new business process flows functional designs Enterprise Learning Management requirements. Work business owners, data owners, end users, external auditors fit gap analysis remediation process requirements, improvements, recommend best practice solutions. Determine risks associated access highlight risks management. Obtain report approval business units data owners financial systems review user access validation. Perform data migrations across multiple environments using Dell Stat 5.6/5.7. Streamline close gaps employee onboarding termination process. Analyze, monitor, troubleshoot business processes systems interface PeopleSoft Financials. Create, analyze monitor access including creation, deletion modification access. Coordinate manage application release processes various teams. Interact different teams project managers, developers, quality engineers, peers, team members integration teams. 07/2014 04/2015 Sr. Application Systems Analyst Company Name － City State Worked business owner gather document business requirements business processes. Created configured Work centers, Dashboards, Interaction Hubs HCM,and Financials using PeopleSoft 9.2 PeopleTools framework. Provisioned user security functional support PeopleSoft HR, PS Financials, PS Campus Solutions, Workday HCM. Ensure appropriate roles, permission lists, row level security exist functional areas. Mapped security parameters PeopleSoft 9.1 9.2 upgrade. Worked third party vendors implement solution. Created maintained documentation application support technical environments. Performed data cleanup validation security roles permission lists. Performed user security role recertification ensure SOX Data Privacy assessments. Prepared applications Identity Access Management. Identified resolved application issues effectively timely manner. Provided advanced technical application support troubleshooting. Performed service request changes assigned work accurately efficiently. Supported remote users using Citrix Remote Desktop, Microsoft Lyncs. 10/2007 07/2014 Sr. ERP Security Analyst/Team Lead/Project Lead Company Name － City State As team lead, responsible implementation, troubleshooting, cybersecurity assessments, PeopleSoft user security reviews security support, user system access review, upgrades PeopleSoft HRMS, PeopleSoft Financial systems, Workday HCM. Ensure appropriate roles, permission lists, row level security exists functional areas. Responsible working stakeholder gather requirements bridge gap US Oncology (USON) McKesson Specialty Health merger. Worked stakeholders perform comprehensive requirements gathering onboarding new oncology clinics McKesson network. Gathered requirements implemented change transfer USON corporate employees McKesson's PeopleSoft HCM. Managed application project initiatives, procurement, change management; included impacts business applications, processes supplier management day-to-day planning, audit schedules, risk management, compliance, ensuring team met required level service production. Responsible coordinating IT support teams major incident management issues using ITIL best practices. Performed business processes creation, analysis, re-engineering. Provided specialized training application functionality. Investigated resolved IT issues complaints end users, business owners, stakeholders. Supported maintained applications IKnowMed EHR. Managed performed change management security initiatives business process changes PeopleSoft HRMS, PeopleSoft Financials including Grants, Workday HCM. On boarded new oncology practices; worked clients perform fit/gap analysis integrate practices McKesson network. PeopleSoft functions included creation, modification roles permission lists, updates row level security, processes, query security. Responsible creation, modification terminations security users iKnowMed EHR, PeopleSoft, Oracle, Siebel, additional medical systems. Served core team member EIB uploads, implementation integration security business processes Workday HCM, Payroll, Time Tracking Absence Management Compensation Modules. Provided technical functional support PeopleSoft Financials, PeopleSoft HR, Workday HCM. Actively provided PeopleSoft security subject matter expertise internal audit team assist evaluating adequacy effectiveness application controls monitored annually. Maintained security documentation including migration requests, security component object standards definitions, weekly status reports. Created maintained security admission procedures application. Managed generated weekly security reports security incidents Heat incident handling tool reduce number security issues defects enhance application controls monitoring. Developed distributed quarterly security audit reports business owners' review signoff. Worked business owners identify risk, define business processes, reduce granting excessive access users. Coordinated business owner process approvals authorization requisition approvals, invoice approvals, employee time approvals, user provisioning. Participated change management meetings add value perspective awareness impacts operational changes proposed. Contributed ideas building efficiency within department business units. 04/2007 10/2007 Manager Company Name － City State Managed assisted development major incident management procedures followed IT staff resolving network related issues. Served key role Remedy implementation project; included installation creation data structure requirements value data population new Remedy incident handling tool. Created Change Management strategy established reinforcement mechanisms celebration success. Developed maintained network infrastructure met service level requirements provided additional capacity growth. Applied structured ITIL major incident management change management approach methodology. Identified potential people-side risks anticipated points resistance; developed specific plans mitigate address concerns. Provided documentation, tracking potential gaps risks, status mitigation steps reduce risks. Conducted readiness assessments, evaluated results presented findings. Developed set actionable targeted change management plans including communication plan, sponsor roadmap, coaching plan, training plan resistance management plan. Supported execution plans employee-facing managers, business leaders, stakeholders. Conducted active visible coaching change sponsors' executive leaders. Created managed systems metrics track adoption, utilization proficiency individual changes. Identified resistance performance gaps, worked develop implement corrective actions. 03/2006 04/2007 Lead Client Security Analyst Company Name － City State Served liaison business IT departments supporting global accounts companies located world. Worked developers implement changes production. Led team five employees including first level support located Gurgaon, India provide production security issue resolution. Met business team determine requirements define new process flows new teams. Gathered requirements newly created teams determined business applications/environments necessary proper job performance. Developed enforced policy regarding mandatory security procedures. Documented functional/training procedures implement changes security procedures. Instituted security policies dictated business needs. Regularly met internal external auditors perform security walkthroughs assisted documenting test plans mitigating findings. Ensured SOX/SAS70 audit compliance performing monthly/quarterly user audits. Developed maintained documentation audit compliance. Performed Business Impact Analysis Cost/Benefit Analysis potential tools, applications, hardware, system solutions. Chaired weekly meetings address various client issues. Worked stakeholders identify moderate risks. Created new roles, maintained segregation duties ensured appropriate access levels applications maintained across product/business lines. Structured roles/permissions according design specifications user specifications. Managed Siebel queues disseminate, track, evaluate security requests received Client Security. Implemented modifications request processes. Participated functional testing. Implemented tested changes online request processes. 05/2002 03/2006 Sr. Technical Analyst Company Name － City State Coordinated analysts/programmers evaluate, modify, test, debug, maintain applications. Performed parallel testing functional testing PeopleSoft upgrades. Administered PeopleSoft security create, modify, delete security users. Diagnosed resolved software issues defects. Accurately interpreted fulfilled customer requirements achieve customer satisfaction. Provided third level end user support. Worked network application support team resolve technical issues. Created maintained support roles permissions lists based functional specifications security requirement requests. Identified managed problems, determined root cause, initiated corrective action risk mitigation applicable. Provided support AS/400 Mainframe, E-Procurement, PeopleSoft, VPN connectivity, Blackberry, applications. Documented new/existing functional processes procedures, well created knowledgebase articles related previously undocumented resolutions. Worked business process re-engineering initiatives. Established maintained cooperative working relationships effective system communication within organization. Developed training technical documentation performed end user training. Facilitated weekly continuous improvement meetings business users identify enhancement requests production support issues. Participated weekly production support meetings IT. Maintained issue development task list documentation status reporting issues enhancement requests business users. 02/2000 09/2001 Systems Infrastructure Analyst Company Name － City State 10/1999 02/2000 Technology Service Consultant Company Name － City State Education Training B.B.A Management Information Systems University Houston Management Information Systems 2010 Certified Information Systems Auditor (CISA) Certification 1085531 *Legacy MCSE, CCNA, Novell certified *Delta Sigma Pi Business Fraternity *Agrium Women's Leadership Group Skills Streamline, approach, AS/400, audit reports, auditing, business owner, business process, business processes, business process re-engineering, CCNA, Change Management, CISA, Citrix, coaching, hardware, continuous improvement, Council, Client, clients, customer satisfaction, database, Dell, documentation, E-Business, Financials, Financials 8.8, Financial, financial reporting, functional, Grants, HP, Hubs, HR, Information Systems, internal audit, IT management, IT support, ITIL, Leadership, team lead, Mainframe, meetings, Access, MCSE, MS Office, MS Project, SharePoint, migration, Enterprise, network, Novell, Oncology, Oracle Enterprise Manager, Oracle, Developer, Payroll, PeopleSoft HRMS, PeopleSoft, PeopleSoft 9.1, PeopleSoft 9.2, PeopleTools, PeopleTools 8.51, personnel, policies, processes, Procurement, quality, re-engineering, reporting, requirement, requirements gathering, risk assessment, risk management, Sarbanes Oxley, SAS, Siebel, Sigma, SQL, strategy, Structured, supplier management, user support, user training, technical documentation, TOAD, troubleshoot, troubleshooting, upgrades, upgrade, validation, VPN, Visio, articles