Ervaren Systeemspecialist en Security Auditor

Profile
From 1998 Until today I’m working with RACF as an RACF
Administrator and as an RACF Auditor. An interesting combination of
knowledge.
All this time I have worked with RACF Consul in several jobs as
administrator, analyzer auditor and advisor.
So I have my experience and skills in the two mentioned jobs.
As an RACF administrator
• Add users, groups, datasets and other RACF permissions.
• Secure the use of RACF.
As an RACF analyzer/advisor to the management
• RACF database
How is the RACF database implemented and confgured?
• Implementing RBAC roles
How are de RBAC application roles designed and implemented in
your company?
Is there separation of duties well implemented in a way that this don't
conficting a good confrmation of In Control Statement.
• Risk analyses
Analyze the outcome of external audits.
Analyze the outcome of internal audits.
How to manage these audit fndings related to receive an proper ‘In
Control Statement’ or ‘Third Party Declaration’.
As an RACF Auditor to control and advise the manager
• How are the roles designed in RACF?
• Witch Security guidelines are valid?
• Are there security breaches?
• Which First line of defense controls are implemented?
• Pre-audit the company on various subjects according to RACF.
What outcome you can expect when you are audited?
What kind of skills I have
• My 26 years working experience as a RACF Auditor using Z-Secure.
• Also my 26 years’ experience as a RACF Administrator.
• The relevant IBM-RACF courses.
• The relevant Consul-RACF courses.
• RACF-CARLA queries on the RACF database.
• Analyse if people do the right things with their RACF rights.
• My experience as an Lead Internal Audit specialist.
• Microsoft Word, Microsoft Excel to write and analyse.
• TSO/ISPF
• JCL
• USS
• Basic REXX to understand what’s happening.
• YAML
• SPLUNK to monitor security logging.
• Basic Python to understand what’s happening what programmers do.
• The ability to ask the Python Programmers to program what I want to see.
• The ability to work with other specialist.
• The ability to work in a team and also alone when it’s necessary.
• The ability to coach people.
Give back my knowledge for the future generation.
RACF-security can be managed in another way…an interesting
combination I would say. It’s really works if you do this properly.
Work Experience
Internal Control
Conducted internal controls on IT ITIL processes. External auditors
can use my conducted controls as a base.
Quality Control
Assessed TPM controls and judged outcomes of internal control
teams. No TPM/ICS deviations.
Consulting
Advised management in response to audit fndings to achieve
workable solutions with risk coverage. Approval of TPM/In Control
Statement.
Advice
Supervised external audits and discussed results with responsible
management. Delineation of findings led to less burden on operational teams.

Advice
Wrote programs for RACF and carried out checks. Improved risk
management through internal control measures.
Functional Management
Managed the RACF database in all kinds of areas as a RACFAdministrator. Ensured good security design with as few external
audit findings as possible.

Auditing RACF
Carried out all kinds of audits in the feld of use of RACF to
demonstrate a degree of risk control. 
Good and reliable controls
served as the


Auditing
Conducted fraud investigations. No further explanation.
System Specialist RACF
Ministry of Finance
2005 - present
Served as Security Administrator.
System Specialist RACF (Auditor)
Ministry of Finance
2005 - present
Conducted security auditing and analysis.
FIB3 ofcial B/CICT
Ministry of Finance
2001 - 2004
Managed internal controls and provided security advice.
IC ofcial-B/CICT
Ministry of Finance
1998 - 2001
Handled internal controls.
Customs ofcer
Ministry of Finance
1995 - 1998
Conducted security checks and functionary duties.
Customs ofcer Import Export Verifcation
Ministry of Finance
1983 - 1990
Performed import and export verifcation checks.
Customs officer
Ministry of Finance
1981 - 1982
Conducted surveillance service checks.
Customs Ofcer Supervision
Ministry of Finance
1979 - 1981
Supervised customs ofcers and conducted checks.
Payroll administration
Continental
1978 - 1979