As a team member of Protiviti's IT audit and consulting service line, David has gained extensive experience across a number of sectors including Mining, Telecommunications, Government and Insurance. Led and executed outsourced and co-sourced IT audit engagements where I designed process and controls documentation, audit programs and test plans, completed detailed audit testing, and delivered recommendations to client's management. Performed a range of IT/Technology assurance activities including: - Managing a portfolio of private and public sector clients, leading a team of 2-5 consultants, managing resources, schedules & deliver quality, reporting to management. - ITGC testing across various ERP applications for attest clients across Application Security, Useraccess management, Computer Operations and Change Mgmt. domains that included designassessment and operating effectiveness assessment of the controls. - IT Systems and Application business process controls review - IT Projects Data Migration and Post Implementation Review - IT SOX, Business Corporate SOX - Assessment of Internal IT environment against COBIT, ITIL, NIST and ISO standards. Including the drafting of remediation plan and road map / maturity scale. - Extensive experience in the DAMA DMBOK II Data Governance Framework, including the maturity assessment, gap analysis, solutions design, remediation and benchmark of multiple industries. - Giving presentation/management reports to various potential clients and helping in businessdevelopment activities.

David was a Senior Consultant in the Melbourne office and specialises in IT Risk & Assurance service line. David has performed a range of audit engagements across multiple sectors, delivering experience in IT General Controls, Data Governance, Application Controls, Framework development, ASAE3402 reviews and internal Data Analytics reviews.IT Audit - Assessment of the operating effectiveness of IT general controls such as user access, change management and IT operations for a number of key client applications. Work performed includes the use of internal data analytic tools to support the IT audits of over 30 clients.SOX Implementation - Implemented SOX controls to assist with streamlining internal audit framework for a large food manufacturer. This engagement consists of mapping current internal controls to SOX requirements while creating and/or modifying existing controls to satisfy requirements.

Performed Controls Implementation and Compliance Adherence to multiple projects spanning a magnitude of applications for Shell Oil - Business Service Centre based in Kuala Lumpur, Malaysia