Project Manager Management

Genemar Arthur Lazo, MSBA

**** ******** ****** ******* *****, Ca 90278 Phone: 310-***-****(Mobile)

Email: *************@*****.***

OBJECTIVE

Obtain role within an organization to exhibit audit, security, project

management, leadership, and technical skills.

SUMMARY

Results oriented professional with expertise in all aspects of auditing,

security, analysis, developing, testing, various components of IS

applications. Abilities include excellent organization, communication,

rapport building, and leadership skills. Familiarity with the use of

standard technology solutions supporting security such as: networking

(firewall, router, VPN, etc.) access control, user provisioning, directory,

NIDS, vulnerability management, anti-virus, single sign-on, auditing,

encryption. Extensive knowledge of HIPAA, GLBA, SOX, PCI-DSS, and SB1386

and their applicability to technologies and applications.

EDUCATION

California State Polytechnic University, Pomona, 2004

Master of Science in Business Administration - Information Systems Auditing

Overall GPA: 3.6

California State Polytechnic University, Pomona, 1999

Bachelor of Science - Computer Information Systems

CERTIFICATIONS

CISA (Certified Information Systems Auditor), 2005

CGEIT (Certified in Governance of Enterprise Information Technology), 2008

CIA (Certified Internal Auditor), 2009 - Candidate (1 of 4 Domains

Completed)

CISSP (Certified Internal Auditor), 2010)

ASSOCIATIONS

Beta Gamma Sigma Honor Society Member Since:

2003

Awarded membership for academic excellence.

California State Polytechnic University, Pomona

ISACA - Los Angeles Chapter Member Since:

2003

Information Systems Audit and Control Association

IIA - Los Angeles Chapter Member Since:

2009

Institute of Internal Auditors

(ISC) - Los Angeles Chapter Member Since:

2009

International Information Systems Security Certification Consortium, Inc.

PROFESSIONAL EXPERIENCE

January 2010 to April 2010 Lexus (TMS - Toyota Motor Sales, USA,

Inc.)

Job Title: Consultant

. Facilitate interviews application owners for Lexus Dealer Storefront.

. Assist in the development of application process flow and User

Interface.

. Assemble Business Requirements for Lexus.com Search for Nutch & Solr

implementation.

. Write Use Cases and Test Scripts to ensure the application has been

designed as planned.

Environment: Lotus Notes, Microsoft Excel, Word, PowerPoint, Visio.

October 2009 to February 2010 RBZ, LLP

Job Title: Consultant

. Create 2009 Sarbanes-Oxley IT Audit Program documents including

Project Plan, Budget, and IT Audit Testing Framework at TIXC (TIX

Corporation).

. Identify and document information security risks with a threat

analysis and proposed controls.

. Make recommendations to IT Steering Committee for the 2008 and 2009

Remediation Items in Change Management, IT Operations, Physical /

Logical Security, and Vendor Management.

Environment: MySQL, SharePoint, Windows, Team Foundation Server, .NET, SQL

Server

October 2009 to October 2009 Union Bank of California

Job Title: Consultant

. Assisted in executing testing for Physical & Logical Security and

Change Management

. Audit areas assigned included: Network Security, Unix, and Windows

Environment: Nessus, Backtrack, Unix, Windows, ACL

PROFESSIONAL EXPERIENCE (Continued)

June 2009 to July 2009 DIRECTV, Inc.

Job Title: Consultant

. Audit areas assigned included: Network Security, Unix, and Windows

. Audit vendors services provided by Hewlett-Packard to DIRECTV and

Cisco.

Environment: Microsoft Excel, Word

April 2008 to January 2009 Toyota Motor Sales

Job Title: Consultant

. Communicate and support process improvement efforts.

. Develop weekly SOX Dashboard to communicate VEH SOX status.

. Review Internal Audit evidence requests, create response packages for

Security and Change Management.

. Facilitate AIM Tester and Change Management Quality Control meetings

Environment: Microsoft Excel, Word, PowerPoint, Rational Clear Quest,

Rational Clear Case

February 2008 to April 2008 Shopzilla, Inc. (An EW Scripps Co.)

Job Title: IT Compliance Administrator

. Maintain project status documentation.

. Facilitate interviews with application owners.

. Document IT controls and review supporting evidence.

. Execute testing, document findings, and gather evidence.

. Assist in development of Audit Programs, Business Process Narratives,

and Risk and Control Matrices for Change Management, Security, and

Technology Operations.

Environment: Microsoft Excel, Word, PowerPoint, Visio.

July 2007 to December 2007 Triad Financial Corporation

Job Title: IT Project Manager

. Document IT controls and review supporting evidence.

. Facilitate interviews with critical financial application owners.

. Assist in development of Audit Programs, Business Process Narratives,

and Risk and Control Matrices for Change Management, Security, and

Technology Operations.

Environment: Microsoft Excel, Word, PowerPoint, Visio.

April 2007 to June 2007 Kaiser Permanente

Job Title: Senior IT Auditor / PCI DSS Consultant

. Facilitate interviews with Credit Card Application owners.

. Provided guidance for obtaining compliance with PCI DSS.

. Create archive of artifacts and work papers in Docushare repository.

. Document Credit Card Data Flows, System and Hardware Inventory, and

Software Process Remediation documents.

Environment: SharePoint, Microsoft Excel, Word, PowerPoint, Visio.

August 2006 - April 2007 California Pizza Kitchen

Job Title: Compliance Manager

. Lead the PCI DSS Compliance effort for 2007.

. Facilitated successful 2006 SOX 404 assessment for CPK.

. Managed 2006 SOX IT Audit to through annual audit and Q3 and Q4

control remediation.

. Documented IT controls and review supporting evidence IT Security, IT

Operations, Change Management, Vendor Management, and IT Governance.

Environment: SharePoint, Microsoft Excel, Word, PowerPoint, Visio.

March 2006 - August 2006 Pacificare, A United Healthplan Company

Job Title: Senior IT Auditor

. Lead team through high-profile quality audits.

. Execute process improvement for IT Audit group for SDLC, SCC, and

Physical Access.

. Lead QVR (Quality Verification Review) project to successful

completion.

Environment: Microsoft Excel, Word, PowerPoint, and Risk Navigator.

PROFESSIONAL EXPERIENCE (Continued)

July 2004 - February 2006 Jefferson Wells - Irvine, CA

Job Title: Senior IT Auditor

Client: The Mercury Insurance Group

Utilize IT Audit and Business Process Analysis skills to develop Sarbanes-

Oxley Section 404 Compliance Project documents such as Narratives, Design

Effectiveness Matrices, Test Plan documentation.

Client: The Boeing Company

Utilize IT Audit and Business Process Analyst skills to QA Sarbanes-Oxley

Section 404 Compliance Project documents such as Narratives, Financial

System Application Matrices, Corrective Action Plans, Issues, Design

Effective, and Operational Effectiveness documents.

Environment: Microsoft Excel, Word, PowerPoint, and Project.

November 2003 - July 2004 SCAN Healthplan - Long Beach, CA

Job Title: Senior MIS Application Developer

Environment: Visual Studio .Net ASP 3.0, VB 6.0, COM+, Windows 2000, and

SQL 2000

April 2002 - November 2002 XDimensional Technologies, Inc - Brea, CA

Job Title: Programmer Project: Insurance Policy Management

Application

Environment: ASP 3.0, VB 6.0, COM+, Windows 2000, and SQL 2000

July 2001 - October 2001 CarParts Technologies - El Segundo, CA

Job Title: Software Engineer Project: Enterprise Channel Master System

Environment: ASP 3.0, VB 6.0, COM+, Windows 2000, and SQL 2000

March 2000 - June 2001 Deloitte Consulting - Los Angeles, CA

Job Title: Systems Analyst Project: Financial Services Solution -

Irvine, CA

Environment: ASP 3.0, VB 6.0, COM+, Windows 2000, and Oracle 8.0

Project: Business-to-Business Solution - San Jose, CA

Environment: Windows NT, HTML, JSP, Java Servlets, and Oracle 8.0

June 1998 - March 2000 Xerox Corporation - El Segundo, CA

Job Title: Software Engineer Project: Software Process Improvement

Group

Environment: VB 6.0, Windows NT, and Access '97

TRAINING

. Sarbanes-Oxley Orientation

. MS Project for Project Management

. Software Quality Assurance Orientation

. Fundamentals of Auditing SAP Security

. Software Requirements Management Course

Contact this candidate