Andrew G.

Assistant Vice President & Director, Internal Audit (IT Audit) @Western & Southern Financial Group

Multiple individual performance awards.* Lead IT Audit discipline. Performance manage up to 7 fulltime associates. Team members received multiple recognition incentives, promotions, and education awards. Actively support recruiting and development.* Complete annual IA risk assessments for IT audit areas and develop IT audit plans.* Planned, executed and led information technology general controls (ITGCs) assessments for apps, operating systems, and databases in areas of Logical & Physical Security, Program Change Control, Privileged & User Access, Backup & Recovery, Scheduling & Batch Processing, Segregation of Duties, Key Interfaces & Reports.* Document IT audit findings and reports. Consult with management on remediation.* Ongoing consulting on IT risks and controls with senior management including the CIO, CCO, CFO, CTO, CRO, CAO and CEO.* Consult on: Business and IT Transformation; Software Quality Assurance; Enterprise Risk Management (ERM); Segregation of Duties; Information and Cyber Security (NY DFS, NIST CSF/RMF/800-53); Data Loss Prevention (DLP); Security Information and Event Monitoring (SIEM): Physical Security; Database Activity Monitoring; Internet Content Filtering; Penetration Testing and Security Vulnerability Assessment; Privacy (PCI, HIPAA, CCPA, etc.); Business Continuity/Disaster Recovery.* Support Internal Audit strategic initiatives on Risk Modeling and Data Analytics.* Responsible for audits of: Identity Management; DNS; VMware; Vendor Risk Management; PCI-DSS; IT Risk Management; Software Quality: SDLC Requirements, Testing, Quality Assurance/Control, Root Cause Analysis, and Application Security; IT Security Management (ISO 27002); Network Access Controls; Enterprise Encryption; Data Classification and Records Management; IT Asset Management; Mainframe Security; Remote Access.