Steven Bemis Email & Phone Number

Created methodology and automated Computer Assisted Audit Technique (CAAT) scripts for efficient data analysis for the county’s PeopleSoft (Human Resources), Odyssey (Criminal Justice and Court Management), and MUNIS (Accounting/General Ledger) systems using ACL for Windows.Created documentation of the county’s PeopleSoft and Odyssey system database structures using ACL, Visio, and Microsoft Office. This material was then used as I developed the County’s Computer Assisted Audit Test (CAAT) scripts.Served as the Auditor’s Office subject matter expert for technology and system security during the selection and acquisition of the county's new accounting ERP system.Supervised the development of IT auditing skills within the internal audit staff including personally sponsoring an individual in their successful effort to obtain their Certified Information Systems Auditor certification.Provided testimony to the Texas House of Representatives County Affairs Committee and the Collin County Commissioners Court regarding the need for computerized audit tools and the implementation of these.Participated as a key manager in the development of our request for proposal, vendor selection, and identification of process modifications to ensure the successful implementation of an automated workpaper management system.

2005-2006 Vice President Communications2006-2007 Vice President Communications2007-2008 Membership Coordinator2008-2009 Vice President Membership

Completed IT Risk Assessments and FFIEC Structured IT reviews of client banks and financial institutions and provided related consulting services for shortcomings and weaknesses identifiedUtilized PULSE TG-3 Self-Audit procedures for client banks that were required to perform the assessment and file their results with the network.Executed internal network vulnerability scans at client locations to identify weaknesses within their networks using software and tools that are commonly available and which are known to be used by attackers.Performed social engineering assessments (in-person, e-mail, and telephone) for financial institutions to assess and report on the security controls in place and overall readiness of the client’s employees and officers.Provided insight, knowledge, and experience in redesigning the FFIEC and Risk Assessment methodology used by the teams at client engagements to support the final deliverable reports.

• Assisted in the implementation of and executed a process for assessing client journal entries using computer aided audit techniques (CAATs) using ACL for Windows as well as a proprietary tool.• Completed IT general control reviews of client IT department practices in conjunction with their annual financial audit controls testing, including assessing compliance with Sarbanes-Oxley requirements.• Participated in training and provided assistance to team members with the use of ACL for Windows, Microsoft Office (Access, Excel, PowerPoint, and Word), Sarbanes Oxley, General Controls, and the design of appropriate tests of controls.

• Assisted in the design and development of the Firm’s methodology for assessing client IT practices in conjunction with their financial audit general computer controls testing, compliance with Sarbanes-Oxley requirements, and forensic engagements.• Developed methodology, planned and executed SAS 70 type II engagement for an IT service provider client• Completed fraud analysis, evidence preparation, and assessment services for financial audit and litigation support clients.• Consulted with clients on accounting software selection and implementation.• Developed automated tools and templates that improved efficiency of IT consulting and financial audit general computer control testing, documentation, and review.• Provided guidance to Firm on networking, telecom, security, applications, and systems hardware to improve the effectiveness of its technology investment.

Managed staff and performed IT audit and consulting services for client companies. As the Firm's first IT Audit professional, I developed the tools and methodology used for the IT Audit services that the Firm offered. I assisted with prospective client marketing and was responsible for project management, administration, and billing. My supervisory duties included mentoring new intern staff and interviewing prospective employees.

Performed IT audit procedures in conjunction with my client’s Internal Audit Department,Provided training to Internal Auditors at client companies on the use of Benford’s Law and data mining techniques,Assisted client to complete Sarbanes-Oxley IT control documentation

Contract employee to Jefferson Wells International,Performed general computer control assessments, database configuration and security assessments, and Sarbanes-Oxley IT controls documentation

Managed individual audits to accomplish objectives within the budgeted time period,Developed and conducted training for staff on uses of ACL for windows and Benford’s Law,Provided assistance with development of department policy and work practice,Designed continuous audit methodology for vendor payments and expense reporting systems,Assisted in IT outsourcing contract review during the Company's negotiations with IBM.

Developed application for performing automated risk assessment using data from multiple platforms including OS390 - UNIX - Novell - and MS Windows NT/9X and multiple databases including DB2 - SQL Server - Teradata - Sybase - and Oracle,Executed complex database queries to obtain data for analysis with automated auditing tool (ACL),Acquired data and resources for data analysis and performed procedures using Benford's Law and tests developed by Dr. Nigrini for number frequency,Provided IT support to financial auditors in the field

Introduced new procedures and systems to department,Performed audit procedures using ACL for DOS and Windows,Evaluated internal controls and procedures using COSO matrix,Assessed information system securit - controls - and operations for Tandem - Solaris - and Microsoft Windows NT,Assisted in year-2000 inititive and review of testing performed,Performed internal audits of trading desk operations - swap transactions - demand deposit services - disaster recovery - advances - compliance - collateral and safe-keeping operations

Master

Bba

Aa

Aas

Education record