Jo-Ann Ferri Email & Phone Number

Nj

Accountable for executing test scripts for Bristol Myers Squibb's Sarbanes-Oxley (SOX) requirements as applied to Information Technology General Computer Controls (ITGC) in relation to control objectives for information and relation technology (COBIT) and Committee of Sponsoring Organizations of the Treadway Commission (COSO).• Responsible for performing 2nd line of defense functions• Performed IT audits that were objective• Examined and evaluated internal controls• Performed audits that IAD and external auditors could place reliance on• Maintained professional standards to include independence• Produced deliverables in a timely fashion• Utilized analytical skills to align Customer approvedPolicies, Standards, Procedures, and Work Instructions with audit activities• Utilized analytical skills to adapt an audit program to a specific project• Communicated audit results in a clear and concise manner• Conducted Business Impact Analysis Reviews with Clients• Designed recovery strategies for IT infrastructure and Business processes• Proven experience with managing technical infrastructure projects (platform, database and software components)• Performed SAAE16 reviews

Kenillworth, Nj

Sr. IT Internal Auditor - Merck Corporate Audit and Assurance Services (2006 – 2016)Conducted risk assessments, audit planning and fieldwork for domestic and international S404 IT and operational audits for IT Services, Global Human Health, Manufacturing and Data Privacy.• Prepared audit planning and performed fieldwork testing for 6-8 domestic and international S404 IT audits each year.• Performed process walkthroughs with both the business and information technology process owners to obtain an understanding of the control environment for each of the designated cycles under review for each audit.• Provided assurance over financial reporting integrity by evaluating the effectiveness of IT General Controls (ITGC). • Streamlined departmental operations on a continuing basis by improving work papers and testing attributes.• Administrator for Bwise Audit tracking tool which encompassed adding and deleting users, setting up audit cycles and providing support to users. Participated in project to replace Bwise tool with Archer tool• Utilized Spotfire Data Analytics tool to create graphs to evaluate risks for companywide audits• Conducted detailed testing for S404 process control to evaluate design and operating effectiveness of internal controls based upon defined guidelines.• Identified exceptions, evaluated the potential for mitigating control points, documented audit reports and presented audit findings and recommendations to senior management as well as to all levels of the organization and external audit partners clearly and in non-technical terms. • Performed pre- and post-implementation reviews for SAP system roll-outs. • Developed and conducted training for new hires on a quarterly basis and presented lessons learned to colleagues during the annual audit department training week.

Whitehouse Station, Nj

Project Manager for the S404 implementation of audit management tool including, training and creation of training manual, issue resolution, enhancements and reporting.• Supported Merck’s annual global S404 IS Assessment and served as Administrator for the Internal Control Tracking Tool. • Assisted in the annual IS scoping exercise and monitored the annual process.• Participated in the development and upload of IT SOX compliance control cycles into Internal Control Tracking System database.• Participated in the change control process to identify proposed process and system changes having a potential impact on S404 compliance.• Coordinated and aligned weekly with external auditors on any findings for company's S404 certification and external auditor’s attestation.• Used Cognos to work with stakeholders to design and produce reports. Utilized Dream Weaver technology to manage the maintenance and updates to the dynamic S404 Website. • Used Visio technology to create process maps to enhance control activity documentation and facilitated process improvement projects.

Whitehouse Station, Nj

Provided second level desktop computing technical support for Merck employees and consultants.• Provided trouble shooting, deployed software installations, upgrades and hardware fixes.• Managed 3 year life cycle computer upgrades for 3,500 employees and contractors.• Budgeted and purchased desktop and laptop computers through SAP system. • Developed a process for locating and scheduling computer builds and computer life cycle upgrades.• Developed a process for tracking and storing hard drives for Electronic Discovery litigation. • Created communication material for IT training and technology awareness events.

Merck & Co. (Contractor)

Created Deskside Support intranet website containing SOP's, guidance, solutions and downloads.• Responsible for providing second level pc technical support and services to Merck employees and consultants. Created instructional guides for internal laptop users.

Piscataway, Nj

Provided helpdesk support to the user base of teachers and hardware/software engineers.• Created technical guides with specifications for computer hardware and software application installation in computer labs.• Contributed to content development for company Website.

Bridgewater, Nj

-Provided Help Desk software support for Medical Billing and Records systems used by physician offices and hospitals.-Software testing-Updated and maintained templates for medical forms

Woodbridge, Nj

-Computer and software support for Hess corporate headquarters employees.-Provided software application support to gas station managers and terminal managers.-Proficient in BASIC, Focus and Data Analyzer programming.-Program Librarian Change Manager

Colonia, Nj

First Grade Teacher

Masters, Management Information Systems

Graduated with Honors

Bs, Elementary Education