Director
Current• Led pre-IPO and SOX readiness projects for manufacturing, media, and biotherapeutics industries. Identified IT general control (ITGC), IT application control within business processes, and key reports with financial reporting impact. Advised for policies and procedures and control remediation actions for IT governance, access security, change management and computer operations. Provided IT Control trainings to clients’ executives.• Led SOX and Internal Audit IT projects for public companies in the real estate, telecommunication, mobile banking services, and manufacturing industries. Conducted project planning, risk assessment and scoping, project execution, client communication, liaison with Big-4 external auditors, deficiencies communication, audit committee reporting, resource coordination, and team development. Experienced in audit for SAP, Oracle database, NetSuite, MRI, Nexus, Workday, AWS, Okta, Salesforce, Active Directory.• Advised on controls and audit documentation for clients’ system implementations through software development life cycle (SDLC) for Workday, Oracle NetSuite, MS Dynamics 365, Blackline, Yardi, and Angus.• Led SSAE 18 SOC 1 Type 2 report engagements for real estate and entertainment distribution industries. Conducted project proposal, planning, budgeting, on-site field work, testing review, deficiencies assessment, and final report issuance per AICPA SOC guidance.• Coordinated seven SOC 1 Type 2 attestation projects with control owners and executives who are US. Mexico, and Europe territories and leveraged resources and knowledge to improve audit efficiency.• Reviewed and assessed service organizations’ SOC reports and mapped complementary user entity controls with the user entity’s business process and IT controls. Identified service organizations’ control impacts to the user entity and advised on compensating controls.• SOD Analysis using FastPath