Audit Manager

Past Performance Highlights: • Applied knowledge in COSO and COBIT to IT audits for since the passage of SOX. • For eight years, prepared and performed testing in accordance with SOX 404 requirements in ELC (entity-level controls) in IT operations and ITGC (IT general controls). ITGC included software development, change management, IT operations, and logical and physical security of access to individual employees and others. • Performed walkthroughs in key business processes. • Applied my experience and knowledge to ERM (enterprise risk management), in interviews with user group and management. • Designed risk-control matrices for different business processes (not only IT processes, but business processes such as accounting, inventory, fixed assets, payroll, and others as well). • Managed up to 15 individuals in the audit, accounting and other departments • Discussed deficiencies noted during the testing with senior management, and held meetings with users and managers to discuss deficiencies and suggested practical remediations. The objectives were to remedy deficiencies and restore operation effectiveness and efficiency pursuant to SOX 404. • As a CPA, experienced in both financial and IT audits. • Revised the IT security policy and other critical IT documents to comply with SOX 404, discussing with management each change before deployment to whole organization (parent and foreign subsidiaries). • Experiences with data mining software ACL. Developed custom reports with Crystal Reports for clients. Passed SQL programming course offered by Oracle.

Auditor

Doylestown, PA