David Muldoon

About David Muldoon

Technology, Project & Program, Operational Risk Management leader with 20+ years of experience in the financial services industry, specializing in risk management, regulatory compliance, and strategic project execution. Proven leader in building high performing teams, implementing enterprise-wide risk frameworks, and delivering audit ready solutions aligned with evolving regulatory and corporate requirements. Recognized for expertise in risk assessment and mitigation, developing innovative compliance tools, and providing effective challenge to first-line risk practices.Functional Areas of ExpertiseRisk & Regulatory Management: Operational Risk, Regulatory Compliance (FFIEC, Basel SOX, SOC2, PCI, NIST CSF), Risk Assessments, Control Frameworks, Audit Management, Regulatory Management (Federal Reserve)Project & Program Management: Agile (Agile-SDLC, Scrum, Kanban), Waterfall, SDLC, DevOps, Stakeholder Management, Budget Management, Vendor Management, M&A Technology Integration, Organization Change ManagementIT Management & Infrastructure: IT Strategy, Technical Team Leadership, Infrastructure Design & Implementation, System AdministrationData Management & Analytics: DCAM, Data Governance, Reporting & AnalysisTechnical Expertise: Engineering, Architecture Implementation, Solution Evaluation & Selection, Incident Management, Microsoft Office Suite (Highly Proficient - Excel, PowerPoint, Word, Visio) and a host of othersProcess & Compliance: Process Design Engineering & Management, Compliance Management, Policy Development, Documentation, Training & CommunicationsLeadership & Communication: Team Building & Motivation, Cross-functional Collaboration, Stakeholder Communication, Influencing Change, Presentation Skills, Effective Communication, Technical Writing & Editing (Published Author and Editor)

Experience

1. Information Technology Audit Manager

   Five Star Bank

   Jun 2025 — Present · Buffalo, NY, US

   I am responsible for updating and executing the Annual IT and Information Security Audit Plan, utilizing a risk-based approach to evaluate IT General Controls (ITGC) and core cybersecurity functions (Governance, IAM, Security Monitoring, Incident Response, Data Management, and BCP/DR). As the technical lead within Internal Audit, I provide the oversight and mentorship necessary to execute complex audits and SOX certification, while integrating technology audit components into business line engagements to ensure comprehensive organizational coverage.Key Responsibilities:Audit Strategy & Governance: Updating and executing the annual IT/IS Audit Plan to evaluate the adequacy of risk management and internal control systems, ensuring business resilience and alignment with regulatory requirements and organizational objectives.SOX Compliance: Leading the execution of SOX key control testing for IT and Information Security, validating the design and operating effectiveness of controls with financial reporting implications.Audit consulting: Provide consulting services to management regarding the regulatory requirements and internal controls for new technology products/enhancements.Vulnerability & Risk Assessment: Deliver technical assessments for Technology and InfoSec division, partnering with the Second Line of Defense to identify material risks, control gaps, and vulnerabilities within the operating environment.Audit Innovation: Advance internal audit practices through data masking, the design of regulatory analysis tools, and the utilization of AI software to enhance technology and information security audits.Stakeholder Management: Partner with IT and InfoSec leadership to influence remediation, leading exit meetings to discuss findings and securing agreeable solutions for management commitments.External Coordination: Coordinate with external auditors to ensure all technology and security-related SOX requirements are fulfilled.

Skills

• ·Effective Communications; Business Writing
• Business Requirements
• Project Management
• Visio
• Sharepoint Development
• ·Pmp
• Smtp/Pop3
• ·Effective Meetings
• Disaster Recovery
• Microsoft Excel
• Powerpoint
• Business Analysis
• Microsoft Word
• Performance Measurement
• Team Leadership
• Project Planning
• ·Itil V3 Certified
• Business Process Improvement
• Requirements Analysis
• Certifications
• Networking
• Html
• Risk Management
• Change Management
• Process Improvement
• IT Management
• Servers
• Itil
• ·Cisco Router Configuration
• Communication
• ·Networking Technologies
• Ms Project
• Mergers
• Telecommunications
• Troubleshooting
• ·Managing and Evaluating Performance
• Vendor Management
• Pmp
• Management
• Software Documentation