Mark Doherty

About Mark Doherty

Certified IT Audit, Risk and Compliance Manager with 10 plus years of experience in…

Experience

1. Senior Grc Consultant

   NRECA

   May 2021 — Present

   Conduct risk assessments to ensure that information security risks are identified, assessed and managed across all applicable Business Areas • Responsible for developing and implementing new IT Policy Framework to be in alignment with NIST’s Cyber Security Framework and HIPAA • Ensure the company’s IT controls and programs are effectively managing cyber risks in addition to maintaining compliance with current privacy and security regulations • Coordinate with external auditors, identify gaps and coordinate with internal subject matter experts to remediate all findings • Develop Communications and Security Training Program content to promote awareness of security best practices with the goal of improving compliance and reducing risk of security incidents • Review and recommend security safeguards and requirements in support of Third-Party Supplier contracts and agreements • Responsible for implementing ServiceNow’s Policy and Compliance, Risk and Vendor Risk Management modules including development of testing scripts and leading User Acceptance Testing • Review and provide feedback to Legal concerning privacy and security language included in MSA\'s • Developed comprehensive list of security questions (SIG) to assist with RFI\'s and RFP\'s

Skills

• Hipaa
• Process Improvement
• Sarbanes-Oxley Act
• Sox 404
• Sap Grc Access Control
• Vendor Management
• Pci Dss
• Nist
• Compliance Pci
• Microsoft Access
• Sap
• Cisa
• Sap Erp
• Risk Management
• Business Process Improvement
• Internal Controls
• IT Audit
• Internal Audit
• Project Management
• IT Service Management
• Management
• Business Continuity Planning
• Sap R/3
• Access
• Business Process
• Business Analysis
• Disaster Recovery
• Sap Products
• Data Analytics
• Acl and Directlink
• Microsoft Excel
• Risk Assessment
• Auditing