Jay Scaramazzo

Through my expert use of technology, my knowledge of Internal Audit methodologies and best practices, my strong internal controls background, my analytical and negotiation skills, my educational background and my financial background I have noted highlights to process improvements initiatives below that I am confident will prove advantageous to your Area.

As a Certified Internal Auditor (CIA), a Certified Information Systems Auditor (CISA) and a professional Certified in Risk and Information Systems Control (CRISC), I have proven my skills and expertise in the domains of Internal Audit, Risk Management and Software Configuration Management/Release Management. I have implemented Corporate Quality Assurance processes and Corporate Cost-Savings initiatives in the Application Development, Change Control and Internal Audit domains. I have implemented multi-enterprise strategic initiatives to control risk exposures and recently performed the analysis and developed the implementation strategy for a Governance, Risk and Compliance (GRC) application to centralize both Corporate Risk Assessments and Internal Audit/Operational Risk Action Tracking monitoring and follow-up procedures, which also included Vendor appraisals and scoring.

I have worked extensively and closely with various External Auditors, the Securities and Exchange Commission and Federal and State Reserve Boards to confirm: adequate and documented controls around security, audit best practices and audit toolset User training, application development practices, infrastructure deployment, change management practices and overseas operations. I have also championed a multitude of cost reduction processes around area and workflow automation.

I have extensive experience in the areas of: Internal Audit, International Finance, Quality Assurance testing and validation, Software Configuration and Release Management, Work Productivity Measurement Control, Software and Business Risk Appraisal, International Insourcing/Outsourcing/Cosourcing Control, Asset Management, Technology and Due Diligence for Mergers and Acquisitions. My background is solid in managing, monitoring and directing multi-enterprise corporate projects to ensure best Audit practices and compliance with existing Service Level Agreements, Corporate Security Standards, Policies, Procedures and Controls.

Some of my major actionable item responsibilities consisted of:
• I was recognized by a Corporate Information Security Office (CISO) for implementing a cost saving initiative valued at $2,985,500 (U.S.), this represented the cost adjusted risk savings for implementing an Application Development Security (ADS) framework
• Implemented first-time automated change control solutions between disparate major financial institutions
• Implemented first-time change control processes between home office and global overseas locations to support software development, content and security frameworks
• Negotiated with major Vendors through Request For Proposal (RFP) processes
• Established Vendor metrics and success measurement for a major Governance, Risk & Compliance (GRC) Corporate Wide implementation strategy
• Implemented automated Distributed Environment build processes, reducing build times by 95%
• Anti-Money Laundering (AML) application configuration, implementation and testing
• Designed and implemented Global Audit Solutions for complete Audit Life-Cycle Support.