Scott Curl Email and Phone Number

Scott was a Senior Manager in Westpac's Group Audit team. He specialised in IT internal audit. His portfolio included the Institutional Bank and Specialist Business technology divisions. Key responsibilities included partnering with business audit teams to deliver hybrid business and technology audits and performing continuous monitoring activities.Concerning audit delivery, Scott was responsible for overseeing Audit Managers in the end-to-end delivery of multiple concurrent audits. Over his six years at Westpac, Scott completed various audits across the Group. This included but is not limited to Westpac’s API management platform, outsourcing, disaster recovery, IT service management, access management, and institutional banking processes covering financial markets (FX spot, derivatives, and algorithmic trading), international branches (London, New York, and Singapore), and payment services (New Payments Platform). He has also completed reviews over the Group's control self-assessment and SOx programs.Scott contributed to the development of the annual technology internal audit plan. This involved refreshing and risk assessing the audit universe, holding internal stakeholder workshops, liaising with external assurance partners, and developing high level audit scopes for committee reporting.Scott was regularly engaged in continuous monitoring activities, and contributed to quarterly committee reporting including developing key thematic audit messages and outcomes.

Scott worked as a Senior Consultant within KPMG’s Technology Risk & Assurance Group as part of Management Consulting. He also has experience working within the Business Intelligence division. Scott has predominantly worked on clients utilising integrated SAP solutions in the consumer and industrial markets industries, as well as several financial services institutions. These engagements have ranged from assisting clients with assessing the appropriateness of the control framework across change management, access security, and business operations processes. Many of these engagements have involved the use of data analytics to perform these assessments.Scott also has extensive experience in both internal and external IT audits, including clients with US SOX internal controls compliance requirements and ASAE3402 control guidelines. Scott has developed extensive experience in using data analytics to perform IT controls testing.

Scott worked as part of Westpac's Enterprise Incident Management team where he was responsible for communicating the incident management process, liaising with key service providers and reporting on incident restoration performance.