|
Jay is a Principal in Brown Smith Wallace’s Risk Services practice, where he has responsibility for providing risk management and internal audit services to the firm’s clients. Jay joined Brown Smith Wallace after spending five years as a Corporate Manager, Information Technology Audit for SBC Communications. Prior to SBC, Jay spent over four years as a senior internal auditor and regional controller for a financial institution and a restaurant management company. Jay’s background includes: Manager of the IT portion of the external audit Sarbanes-Oxley review for a major financial services and healthcare service provider. Responsibilities included analyzing system controls, defining and performing mainframe, client server and network security testing and drafting an opinion on IT general and application controls.Responsible for assisting with documentation and testing of key controls associated with information technology processes as part of the Sarbanes-Oxley project for a leading technology company. Provided overall leadership on IT audits for a variety of technologies. Duties included development of audit programs, communication of audit results, performing risk assessments, development of auditors and assisted with the maintenance of the risk-based universe of audit subjects for strategic audit planning. Assisted in developing IT audit approach to SBC’s SOX efforts and led SOX project teams designed to evaluate and strengthen business and IT controls and to develop analysis tools and guidelines for continual monitoring of these controls. Supported various projects involving company-wide implementation of standardized processes relating to change management, mainframe security, and maintenance of equipment providing support to SBC data centers. Evaluated business continuity planning at the affiliate level, including the ability to recover applications, data and systems. Reviewed offsite storage, alternate site operational capabilities and hardware capacity. Analyzed architecture and management of the Signaling System 7 and 911 services and other elements of the public switch telephone network. Reviewed general controls for Central Offices including change management, physical security, logical security, capacity planning, power diversity and capacity and environmental controls. Reviewed RACF and UNIX configuration of security settings to ensure logical security was enforced enterprise-wide. Identified best practices to enhance regional security controls for compliance with SOX. Reviewed general controls utilized in critical data center facilities. Evaluated physical security, change management, capacity planning, environmental controls, backup and recovery procedures and power diversity and redundancy. | 