Douglas Carney

About Douglas Carney

SUMMARY Leader of high-quality, timely, independent, and objective complex Information Technology audits.AREAS OF EXPERTISE AUDIT TOPICS Third-Party Risk | Ransomware | Active Directory | Wireless Security | Enterprise Architecture | Mobile Devices | Cloud Computing | Media Sanitization | PrivacyLEADERSHIP Relationship Building | Team Development and Empowerment | Stakeholder Engagement | Cross-Functional Communication and Collaboration | Executive Reports and Presentations

Experience

1. Lead IT Auditor - Tech and Cyber

   PenFed Credit Union

   Apr 2025 — Present

   Plan, lead and execute high-quality, timely, independent, and objective complex technology and cyber audits including Identity & Access Management, Authentication, Data Security, Security Operations, Incident & Problem Management, IT Change Management, IT Asset Management, and System Development Lifecycle to ensure adherence to industry frameworks, regulatory requirements, and best practices.• Facilitate and perform the entire audit process from planning to reporting with efficiency and autonomy.• Ensure completion of multiple ongoing audits by prioritizing tasks, delegating, monitoring progress, and anticipating and resolving conflicts and dependencies.• Coordinate the work of a team of Auditors or perform as a sole assigned auditor to ensure the timely progression of the audit engagement.• Analyze processes and assess the level of compliance with applicable procedures, adequacy of controls, efficiency and effectiveness of operations, and accuracy of reported information.• Execute and/or lead multiple areas of complex test work during audit activities. Document key risks, controls, audit test procedures, test results, and audit conclusions.• Prepare professional audit reports on observations identified in the course of audit work and collaborate with management to ensure understanding and develop effective remediation plans.• Review the audit work performed by assigned team members following professional and departmental standards with emphasis on the sufficiency and appropriateness of audit evidence. Provide feedback, mentoring, and developmental coaching to team members when applicable.• Proactively identify control weaknesses and opportunities for improvement and provide recommendations for remediation.• Actively support follow-up on audit recommendations to ensure the actions taken remediate the reported conditions.

Education

• Champlain College

  Master of Business Administration - MBA, Information Security Graduate Certificate

  2018 — 2019

• Salisbury University - Perdue School of Business

  Bachelor of Science (BS), Accounting

  1996 — 1999

Skills

• Cissp
• Fisma
• IT Audit
• Information Security
• Information Assurance
• Penetration Testing
• Vulnerability Assessment
• Nist
• Policy
• Cobit
• Risk Assessment
• Security
• Data Privacy
• Computer Security
• Security Policy
• Governance
• Cisa
• Network Security
• Enterprise Risk Management
• Information Technology
• Risk Management
• Disaster Recovery
• Business Continuity
• Computer Forensics
• Business Continuity Planning
• Sarbanes-Oxley
• Sas70
• Privacy Law
• Information Security Management
• Internal Audit
• Auditing
• Internal Controls
• Analysis
• Government
• Dod
• Data Analysis
• Project Management
• Program Management
• Leadership
• Management