• Assisted Audit Director in continuous IT risk assessment with IT management and developed annual IT audit plan.• Planned, executed, and completed IT audit projects. This included meeting with the IT team gathering planning information, conducting field work tests, presenting audit findings, and developing corrective action plans, and issuing audit reports. • Led SOX ITGC compliance testing – tested area included: logical access, user authentication, change management, IT operations, backup and recovery planning, and other areas that impact financial reporting.• Provided external audit direct support for interim and year-end testing work and control walkthroughs.• Provided internal control advice to IT management as needed.

Worked as an IT audit manager for Ascension Health. Ascension is the second largest hospital system in the US.• Conducted continuous IT risk assessment with Ascension IT management and developed annual IT audit plan.• Planned, executed, and completed IT audit projects according to CHAN Healthcare’s audit standards. This included meeting with client gathering planning information, conducting field work tests, presenting audit findings, working with client to develop corrective action plans, and issuing audit reports. • Timely monitored and followed up with clients on action plans for risk remediation and completion.• Areas of expertise included: IT General Controls (logical access, user authentication, change management, IT operations, backup and recovery planning, data center security, etc.), HIPPA security and compliance, medical device security, third party SOC2 report review, vendor contract management, PCI program review, and post-implementation review.• Coordinated, and assisted E&Y external audit work efforts.

Supported Sigma-Aldrich Applied Market business unit.• Provided sales, expense, and gross margin analysis on regular basis.• Managed customer segmentation between different business units and conducted analysis on impact.• Maintained yearly, quarterly and monthly sales, operation expense, and material cost planning.• Prepared and analyzed customer sales performance by products, material, and region.• Recruited and trained offshore global shared service employees.

Workedas the Finance Integration Manager on the Regional Optimization project. Evaluated new legal structures’ impact to finance business function as well as information system. Provided business requirements to align processes with the future structure and goals. Worked closely with all level of Finance management worldwide and other functional leads to ensure all impacted processes are integrated. Coordinated system test, create and update impacted finance standard operating procedures. Developed and conducted training to the impacted finance end users. ** During two years of project implementation, saved Sigma-Aldrich over $2.0 million of consulting expenses. Developed and updated global finance policies and procedures.

Managed overall information technology governance and compliance program. Coordinated governance and compliance activities between different functions, including Information Technology, Finance, Human Resources, Legal, and Operations. Increased the effectiveness of overall IT controls, and improved IT governance awareness throughout the company. • Developed and managed company-wide Payment Card Industry Security Compliance program through cross functional efforts for compliance.• Created, reviewed, and updated information technology policies and procedures based on ITIL or best practices, and communicated policy requirements worldwide.• Coordinated IT disaster recovery plan updating, and testing activities with vendors, and other IT departments. • Assisted with external and internal audit on general IT reviews, Sarbanes-Oxley audit, and other regulatory reviews. Helped auditors to collect requested information during their audit. Monitored IT audit findings, worked with IT stakeholders to ensure timely correcting audit issues. • Acted as point of contact for General IT control, access control, and other information security matters. Provided consulting roles for system development projects.• Maintained data privacy compliance program with Human Resources, SAP security team and Corporate Legal Department worldwide.• Developed information security awareness training material, and conducted the training within the company.• Created a local IS Governance roundtable group including eight Corporations in the greater St. Louis area for IS governance personnel to share and benchmark IT governance experience since 2008 (lasted two years).

Managed Internal Audit Department’s daily operation, from directing the team to conduct risk assessment to preparing audit plan, from supervising and coaching staff to recruiting new hires, from performing operational/financial audits to Information Technology reviews, from Sarbanes-Oxley project initiation to special investigations. • Developed and maintained company overall risk assessment module to facilitate developing a risk-based annual audit plan.• Created and refined internal audit standards and procedures.• Established financial and information technology audit programs.• Executed, and monitored internal audit projects and provided value-added recommendations.• Developed and implemented Sarbanes-Oxley compliance projects including all high risk locations. Identified IT controls and developed IT and finance 404 compliance testing program.• Conducted multiple special investigations through data analysis, and provided special audit reports.• Performed information system related audits that included post-implementation review, system access review, and general system review.• Designed audit issues database to track, and monitor audit issue following up status.• Recruited, coached, and trained senior auditors, and staff auditors.• Conducted annual staff performance reviews.

Played a critical role to ensure that the systems implemented were in compliance with internal control requirements for one of the biggest business units in Motorola Inc. • Supervised internal control matters for designing, developing, and implementing SAP R3 to ensure compliance to Motorola internal policies/procedures, and industrial best practices.• Involved in business process design such as vendor selection/validation, vendor data management, purchasing initiation, release purchasing requisition, purchase order management, receiving, accounts payable, and master data management, etc. • Verified system security and data integrity by reviewing role mapping, role design, system access granting procedure, and segregation of duties.• Responsible for making major internal controls decisions and communicating to related parties.

Directly reported to the Asia-Pacific Regional Audit manager, in charge of the overall Asia-Pacific area audit projects. Responsibilities included risk assessment, audit plan, field audits, preparing audit reports, and supervising staff auditors from all other regions (UK, US, Hong Kong, and Mainland China).• Planned and supervised audits at Motorola facilities worldwide.• Obtained, analyzed and evaluated evidential information as a basis for assessing risk at each site. Identified control weaknesses, developed audit findings and recommendations, and presented findings to senior management.• Coached and supervised one to five audit staff on each audit.• Conducted audit team members’ performance evaluations at the end of each audit project.• Completed audit administration tasks; and executed and supervised Year 2000 audits for various business units.

Participated audit projects that involved automobile, chemical, hotel, petroleum and other manufacturing companies.Closely worked with E&Y, PWC and then Arthur Anderson accounting firms on audit projects.