Jonathan Maldonado Email & Phone Number

Alexandria, Va, Us

Dallas, Tx, Us

-Conduct and review research and analysis of a wide range of financial transactions and assist in resolving complex client issues-Participate in financial planning for corporate clients-Apply financial technical knowledge to specific client situations-Interface with clients to obtain information to ensure the delivery of high-quality projects on time and on budget-Clearly communicate status updates and project objectives to the project team-Work as part of a multidisciplinary team-Participate and support business development efforts (research, diligence, analysis, proposal support)

Falls Church, Va, Us

• Assist the Senior Manager in reviewing and evaluating the findings noted in Internal Audit reports for potential SOX impacts and designing remediation activities with the Northrop Grumman’s sectors (Aeronautics Systems, Mission Systems, Defense Systems, Space Systems, Enterprise Services Systems, and Corporate areas) on control deficiencies.• Provide subject matter expertise in IT general computer controls (e.g., logical security, change management, operations, disaster recovery), application, infrastructure areas (e.g. firewalls, operating systems, databases, etc.), and strong knowledge of information security risks.• Perform analysis and/or technical research as it relates to the Company’s SOX program and recommendations which will be presented Company leadership.• Tracking the deficiencies by communicating regularly with internal auditors, external auditors and the Northrop Grumman sectors.• Responding to issues by coordinating with management and process owners to make joint decisions on how error correction/corrective actions should occur. Drawing solutions from others and apply to new situations.• Working with external and internal auditors regarding document requests, and questions or issues, as needed.• Performing and/or directing IT professionals for management’s testing of certain IT general controls. • Participate in special projects pertaining to IT compliance initiatives, as needed.• Perform ad hoc analysis and projects as required.

Chicago, Il, Us

• Support of over 25 IT Audit clients' engagements annually• Understand client's Financial Applications, ITGC's, and IT environments and communicate potential risks over the financial statements.• Plan, execute and control IT audit engagements (ITGC reviews, SOC 1 Type II, SOC 2 Type II, SOC Readiness Assessment)• Draft and report findings to Financial Audit Teams and clients• Manage multiple tasks and prioritize based on deadlines, complexity, and project type• Perform IT risk assessments• Document IT controls, IT compensating controls, interface controls, and other automated controls supporting financial statements.• Perform SOX404 IT Audit engagements for several Commercial Public Companies and Government Contractors in Virginia and Delaware• Knowledge in CaseWare IDEA (Data Analytic Tool)• Participate in seasonal interns recruitment process (Summer 2019: Resumés reviews, Perform Interviews, provide candidate recommendations to the managers, provide IT Audit 101 training, review work papers and supervise interns progress and submit performance reviews).

This position reported to the Information & Cybersecurity Director of Triple-S Salud. I was responsible of establishing relationships and work closely with IT Internal Audit, Sarbanes Oxley (SOX) Coordinators, IT leadership, external auditors, and business units in charge of IT controls. Also, communicate with local IT teams and IT liaisons. Responsible for reviewing management’s narratives, application inventory and testing of IT SOX controls for in-scope IT locations. Manage/maintain and take ownership of SOX documentation repository. Assist with the development of presentations for IT Leadership, IT Steering Committee, and miscellaneous governance meetings. Assist with evaluating recommended IT control improvements at year-end with the external audit and the CIO Staff. Participated in weekly meetings with external auditors regarding global coordination of their work. Assisted with the development and maintenance of policies, guidelines, standards and processes across Grupo Triple-S IT areas. Assisted with responding to IT/IS compliance requests from local and federal agencies, clients and vendors. Assisted with the evaluation and implementation of methods and tools to ensure information classification and protection within the enterprise and in support of the IS program.Experience working with HIPAA Privacy and Security Rules, HITRUST readiness, evaluating compliance with NIST 800-53, collaborated with external auditors during SOC 1 Type II and SOC 2 Type II engagements and coordinated corrective action plans.

San Juan, Pr, Us

▪ Design audits programs (Initial information gathering, objectives, scope, risks)▪ Responsible for distributing responsibilities to peer auditors (supervision)▪ Managed the most complex audits of the plan (Payment Systems, Commercial Services, Technology Management Department, Information Security Audit)▪ Discuss results and recommendations with IT audit team and internal customers▪ Responsible for drafting final reports and tracking audit progress▪ Responsible for reviewing team member’s audit working papers▪ Responsible for evaluating team member’s performance and discussing results with team members

San Juan, Pr, Us

Completed audits (key for my career): Disaster Recovery of IBM Mainframe, Information Security, Technology Management Department, Deposits Applications, Commercial Application and Services, Information Security (former operations at Chicago), Deposit Systems, Anti-Laundering Applications, Fiduciary Services Applications, Certificates of Deposits and Individual Retirement Accounts.▪ Actively provide status of testing assigned to supervisors and other leaders▪ Acquired a good understanding of banking operations and IT processes (ATMs, ACH, Items Processing, Cash Vault, Fiduciary Services, Wealth Management Services, Windows Operating Systems, IBM Mainframe, Backup Recovery Procedures at Sungard, SAP, and other SaaS and third party providers)▪ Proficient with Audit Command Language (ACL)▪ Proficient in TeamMate Electronic Working Papers Software▪ Courses in ARBUTUS and Microsoft Excel▪ Win Commitment Award on September 2014

Responsible of the implementation and maintenance of a Microsoft 2003 Sever architecture and a small network deployment which helped to increase efficiency by 30 percent approximately.Provide training and technical support to employees.Create specialized reports such as Thermographic Survey Reports, Cable Tests Results, High Voltage Substation Tests Results, Electrical Transformers Tests Results (related to Electrical Industry).

As part of Programa ENLACE at UPR, I worked with Daskalos School. The experience help growing in the folllowing areas:Experience on administration of the IT Infrastructure, such as servers, printers, access points, routers and computers.Assist and support the faculty and students for troubleshooting.Acquired experience managing emailing administration platform.Acquired experience on Microsoft 2003 Server, databases management and client/server architecture and understanding of intranet applications and websites.Monitoring IT Infrastructure performance.Acquired experience as administrator of Blackboard Learning System as an Intranet Application at Daskalos.

Bachelor'S Degree, Computer Information Systems

Audio Engineering Certification, Audio Engineering