Brian Obrien

Background

About Brian Obrien

GENERAL PROFICIENCY: Audit and Compliance Certified Information Systems Auditor Segregation of Duties Family Educational Rights and Privacy Act Health Insurance Portability and Accountability Act Access Control User Provisioning Account Life-Cycle Management Metrics-Based Reporting Auditability Administration IT Governance Multi-Project Management Staff Recruiting/Mentoring Team Building Leadership EXPERIENCE HIGHLIGHTS • Security Administration Metrics - Designed, developed and implemented processes to capture key performance indicators of Security Access Administration; Calculated mean-time-to-resolution, status of outstanding incidents, and count of access requests; Developed ability to report on team and individual staff productivity; Developed metrics to capture functional areas for which work was performed; Initiated and administered the process to review user access controls; Implemented process and reporting mechanism to track system vulnerabilities; Established trend analysis reporting. • Transition from Mainframe to PeopleSoft ERP Applications - Converted security and access controls of Ohio State’s legacy IBM CICS IMS mainframe applications to Oracle/PeopleSoft environment. • Security Administration Audit Triggers - Designed, developed and implemented custom Oracle database triggers in the University enterprise applications to capture security administration changes; Process included securing the audit logs and developing exception reports to identify questionable security administrative activity. • Security Compliance Reporting - Established and developed Segregation of Duties reporting for the Procurement, General Ledger and Human Resource enterprise applications; Focused on identification of non-compliant departments and users.