Frederick Brown has over 17 years of experience in IT risk assessment and auditing. He has led teams performing over 50 IT audits covering areas such as SOX, security, and project management. Brown is currently an IT Audit Senior Manager at HP where he manages the audit team and has developed innovative audit approaches using data analytics. He has extensive experience in risk assessment, audit planning, and working with various levels of management.

1. 23706 Forest Trail, Hockley, Texas 77447 • 281-528-3771 • frederick.brown@hp.com
Frederick L. Brown
Summary of Qualifications
• Results-oriented professional with over 17 years of IT risk assessment and auditing
experience and 26 years management and leadership experience.
• Excellent management skills, including: problem solving, building relationships,
team building, written & oral communication, multi-tasking, leadership, training &
mentoring, evaluations, and time management.
• Broad understanding of business processes and underlying IT controls, including
an understanding of how IT solutions should align with overall corporate strategies.
• Keen understanding of relationship between IT risk and business/financial impact.
• Proven experience in risk assessment, audit planning and scoping, executing audit
programs to produce an objective and value-added audit report, and successfully
working through challenging discussions and audit escalations.
• Experienced with control mapping to key frameworks, standard, and
methodologies, such as, but not limited to: COBIT, COSO, ITIL, ISO 27001 &
27002, & PMBOK. Experienced with HIPAA, PCI, SSAE-16, SOX, ISO 27001
auditing.
• Considerable experience and knowledge in a wide range of IT and IT service
delivery areas, to include, but not limited to data center operations & security, data
privacy & data security, network security, IT security governance, application
security, project management/system implementation, and emerging technology
security (cloud, mobility, big data).
• Co-authored IIA GTAG 7 – IT Outsourcing (2nd
edition), Authored award-winning
article on “Auditing the Cloud” for IIA’s Internal Auditor magazine, Co-authoring IIA
GTAG 20 – Security and Management of Smart Devices (released Aug 2016).
Presented “Auditing the Cloud” and “Data Analytics on Audits” at the 2014 IIA/MIS
ITAC Conference.
Experience
Mar 2005 to Present Hewlett-Packard Houston, TX
IT Audit Senior Manager/Head of IT Audit
• Performed detailed risk assessment of IT audit risk universe that drove the annual
audit plan.
• Managed IT audit team through historic company split (Hewlett Packard into
Hewlett Packard Enterprise and HP Inc.) and in providing assurance over IT risk in
new company.
• Developed key relationships from CIO down to L4/L5 IT cyber security

2. 281-528-3771 • frederick.brown@hp.com
Frederick L. Brown
management.
• Created several innovative audit approaches to assess risk, which included a
design-centric comprehensive review coupled with a process maturity rating, and
an advanced data analytics review using data fusion and data segmentation as the
principle analytics methodologies.
• Managed team of audit professionals, delivering multiple highly value-added audit
reports, to include the identification of IT macro-issues around web application and
network security, and an innovative precedent-setting ITGC baseline assessment
(covering 1500+ applications in a single audit) that redefined how the department
approached the IT universe.
• Developed subordinates into department leaders. Mentored numerous colleagues.
• Delivered multiple special projects that improved the processes and tools used in
the company and the audit department, including redesigning the job competence
framework and developing a new tool for measuring and reporting on individual
performance against a common framework of expectations by job level.
• Leading transformational shift in audit, specifically around the use of data analytics
on audits. Building a formal data analytics framework to integrate analytics into the
audit lifecycle. Hosting (since June 2013) a monthly data analytic forum to raise
awareness, provide training and drive the use of analytics on audits. Personally
presented 40+ unique data analytic topics.
IT Audit Lead
• Planned, scoped, and led 50+ IT audits, to include the following types: SOX IT, IT
Operational, IT Infrastructure, IT Security, Project Management/System Implementation,
IT Consultative, Database, Datacenter, and IT & Financial Integrated.
• Developed strong collaborative relationships with multiple levels of management and
key organizational groups & teams, to include: CIO staff & BISMs, ITIO management, IT
Security, SOX IT, E&Y, and multitude Application IT & Business managers.
• Skillfully and effectively communicated audit findings to management; presented at IA
Web Cast, IA Audit Consulting Board, and IA Staff Meeting.
 Proactively promoted high standards within department through a number of team and
individual interactions, such as: developing and conducting training, re-establishing the
auditor (and lead) comprehensive evaluation process, coaching and mentoring team
members, and serving as the IT representative on the department Quality Assurance
and Process Improvement team.
Feb 1999 to Oct 2004 Fujitsu Network Services Exton, PA
Quality Standards Engineer/Regional Quality Manager
 Led Regional Quality Review Committee that included representation from Quality
Assurance, Network Installation, Engineering, Warehouse & Distribution, and Senior
Management, and was instrumental in raising customer report card grade from a “C” to
an “A” in less than one year.
 Conducted a number of compliance and consultative audits, to include the following

3. 281-528-3771 • frederick.brown@hp.com
Frederick L. Brown
types: ISO 9000:2001 & TL9000 Certification and Registration audits, Network
Communication Installation & Engineering audits, Supplier and Turnkey Service
Provider Certification audits, and Customer Network Outage Post-Mortem Investigations
 Developed and implemented/conducted a number of training courses and programs, to
include: 1st
regional supervisor training program, 8 telecommunication and network
training courses for supervisor, installers & engineers, and 5 installation & engineering
quality standards exams.
 Managed over 100 network communication installation projects
Sep 1984 to Dec 1998 United States Marine Corps Multiple Duty Stations
Platoon Commander
 Led largest and most diversified platoon in infantry battalion in both peacetime and war,
and was rated best platoon by Commanding Officer.
 Responsible for the training, professional development, technical expertise, tactical
proficiency, physical and mental fitness, and overall growth of 55 subordinates.
 Liaison officer to 18th
Polish Air Battalion during 1st
ever joint operation during UN
peacekeeping mission. Received special commendation for service.
 Trained and instructed 150 Navy Midshipmen in areas of military protocol, emphasizing
leadership, responsibility, and accountability.
Education
 B.A. in Political Science, University of California at Berkeley, 1995
 CISA Certification, ISACA, 2008
 CRISC Certification, ISACA, 2011
 ITIL Foundation Certification, EXIN, 2008
 ISO 9000/TL 9000 Lead Auditor Certification, FNC, 2004
 Preparing for CISSP and CRMA certifications