Mark Alabanza, Mba, Cisa, Cc, Cpa, Bsac Email & Phone Number

Calgary, Ab, Ca

Calgary

Executes and follows up on annual IT Controls audits based on COBIT 5 for C-SOX reviews which are consistently relied on by the IT Risk & Assurance team of Ernst & YoungCarries out the audit of Application Controls for audits of Internal Controls over Financial Reporting and annual C-SOX audits for all process cycles that include Accounts Payable, Fixed Assets, General Accounting, Inventory and Procurement, Project Management, Revenue, Tax, and Treasury in Canadian, US, Latin American, Middle East, and Australian business units.Completed audit of migration projects of financial and master data from legacy Infor LN ERP, Infor Syteline, and Microsoft Great Plains systems of US, Canada, and Latin America operations into the company's global SAP ECC 6 system. This included test of controls and substantive testing for compliance with C-SOX requirements as well as tests of project management, service management, and information security. Working papers from these were relied on by the external auditor.Codes program scripts using Caseware IDEA Data Analytics for the continuous monitoring of potential duplicate payments to vendors. This is supported by creating queries in SQL and developing data visualizations using Microsoft Power BI.Uses scripting in Microsoft PowerShell for the Identity and Access Management audit of users in Microsoft Active DirectoryUses the SAP User Information System [SUIM] transaction and SAP GRC Access Management for the audit of Segregation of Duties violations and in investigating authorization objects of SAP roles.

Calgary

Managed work allocation in relation to quality and number of personnel.Improved security and SoD compliance with SOX by auditing work completed by colleagues.Lead the project on developing organisational goals with related metrics based on COBIT 5.Lead the management of a security enhancement project in Process Improvement Security.Acted as primary resource providing root cause analysis in reviewing deficient SAP access of on-boarded personnel.

Riyadh, Kingdom Of Saudi Arabia

Disclosed high risks of the SAP implementation .Planned for network penetration testing compliant with PCI DSS.Saved 2,000,000 Riyals in fines by disclosing the absence of software licenses.Reviewed ISO 27001 INFORMATION SECURITY MANAGEMENT SYSTEM compliance.Performed testing of IT Continuity and DRP in the manufacturing plant.Increased work efficiency by writing program scripts that automated tasks.Revived the BS 25999 BC / DRP development to completion by acting as Business Risk Manager.

Baguio City, Philippines

Consulted with information technology users in cash collections, members assistance, loans processing, point-of-sales data entry, accounts payable accounting, accounts receivable accounting, general ledger accounting, and network administration for errors encountered, improvements needed, and new features required in the performance of their job functions. These were documented and scheduled for solutions assessment with the outsourced developers of the institution’s information system.Planned for and carried out financial and operational audits which included the following. * Surprise cash counts for cashiers and other custodians of cash and cash equivalents* Review of loan applications for sufficiency of compliance to requirements before approval* Review of the financial aspect of contracts before submission to the Board of Directors for signing* Audit of billings from private contractors for compliance of actual output delivered with the agreed service / physical specifications before actual payment* Provide assurance for the entire process of bids from publication, to documents review, to awarding* Provide assurance to the process of foreclosing real estate collateral* Reviewing regulatory compliance with the Cooperative Development Authority

Baguio City, Philippines

Created a document of end to end policies and procedures for the IT governance and management framework of an institution based on ISACA's COBIT [Control Objectives for Information and related Technology] reference guide which I designed to be a balance between the aspects of benefits realisation, optimising risks, and resource use. In the area of Information Security, this included an alignment of information security definition to the institution's context, mapping the responsibilities and obligations of information security in relation to its organisational structure, and linking information security objectives to the institution's general objectives.

Baguio City Philippines

Studied the distributions of fiscal transfers from the national government to approximately 2,000 local government units for 6 national budget years uncovering a vertical imbalance causing disincentives for local officials. This led to a proposed policy change in the form of a legislation that eventually sought to equitably distribute the proceeds of national taxes to deserving local government units.Conducted studies and submitted technical papers for a ‘Toll Packing Project,’ financing of micro / small / medium enterprises and small organic producers, and the expansion of the Benguet vegetable cold chain. These integrated studies included the feasibility of the projects in terms of finance, technology, socio-economic acceptability, and administration.

Baguio City Philippines

Required and designed the inclusion of learnings in information security structured within internal controls for establishing compliance to the requirements of Section 404 in the Sarbanes and Oxley [SOX] Act.Received a government grant from the Commission on Higher Education – Center of Business and Management Education [CHED-CODBME] for the completion of Instructional Materials on Auditing in an Electronic Data Processing [EDP] SystemIntroduced the use of PostBooks of the xTuple Enterprise Resource Planning [ERP] Suite for the integration of a business management information system into hands on training in accounting, sales, customer relationship management [CRM], purchasing, product definition, inventory and distribution, and manufacturing.Managed the project of acquiring and integrating SAP into the syllabus of accounting courses for bachelor degree programs in Accountancy and Management Accounting and the associate degree program in Accounting TechnologyUsed COBIT [Control Objectives for Information and related Technology] IT governance and management framework as the basis for lectures of the ‘Contemporary Issues in Auditing in a Computerised Information Systems Environment’ course for the graduate degrees in Master of Science in Service Management Engineering, Master of Science in Accountancy, Master of Science in Business Administration, and Master of Science in Public Management and in the accounting courses for the Bachelor of Science in Information Management program.Outperformed minimum performance evaluation requirements by an average of five [5] points in each academic year

Quezon City, Philippines

Reviewed and reset sales target for the second half of operating year 2000 and established sales quotasSelected and contracted with retailers and implemented after sales services to achieve collection targetPrepared purchase reports, analysis, and presentations to Australian, UK, US, and local suppliersCarried out vendor-supplier correspondences of the entity with Australian, UK, US, and local suppliers

Quezon City, Philippines

Provided systems analysis and design of database and report generation used in automation of business process from ordering, receiving, dispatch, delivery, and returnsInitiated and programmed inventory audit of sales and deliveries to a national retailer disclosing more than one million pesos worth of variance

Quezon City, Phiippines

Implemented computerization of accounting journals and ledgersSupervised and assisted migration of accounting ledgers from paper source documents into a computerized accounting information systemCompleted operations, investment, and financial budget for the operating year 2001Assisted completing external financial audit requirements which included systems flowchartingOutlined, facilitated, and executed year end inventory count

Master In Business Administration, Business Administration And Management, General

Activities and Societies: Vice President of the UP Management Association

Master Of Management, Business Administration And Management, General

Activities and Societies: University of the Philippines Management Association [Vice President] Vice President for the University.

Certificate In Microsoft Visual Basic Programming, Computer Science / Information Technology

Bachelor Of Science In Accountancy, Auditing And Accounting

Activities and Societies: Junior Philippine Institute of Accountants, Laissez Faire Member of the Debate Team