Teodoro (Jong) Santiago Email & Phone Number

Chicago, Illinois, United States

Sales: $17B in annual revenue Hired to leverage extensive Governance, Risk and Compliance and IT Audit experience and systems implementation audit expertise. Performed pre-implementation audit services on EquiTrust Life Insurance Company’s (EquiTrust) IT Transition Project (Guggenheim to EquiTrust). Reviewed key project areas and activities, its impact to other organizations within the enterprise, identified key risk areas and provided practical recommendations to address identified risks and support EquiTrust’s IT Transition Project and enterprise objectives.  Increased probability of successful implementations through improved and more formal project activities (e.g., project management and monitoring, data migration, testing, go-live decision-making).  Improved internal controls environment through the establishment of sound and efficient IT processes and procedures, proper IT process documentation, better IT controls awareness and understanding of compliance requirements. Improved compliance effort and decrease in internal and external audit fees through the development of a healthy internal controls environment with IT General controls that internal and external auditors can rely on.

Deerfield, Illinois, United States

Hired to leverage extensive IT GRC and IT Audit experience to help ensure that WBA’s critical business transformation initiatives and system implementations follow industry leading practices and comply with existing federal and industry regulations (e.g., SOX, PCI, HIPAA, HI-TRUST, CCPA, and GDPR). Developed a Project/System Implementation IT Compliance framework that focuses on enterprise risks including IT risks. This framework requires transformation initiatives and system implementations to include the controls and compliance requirements, address these requirements during the project, resulting in compliant solutions and applications when it goes live. Performed pre-implementation assessments on WBA’s Retail Finance Transformation (SAP), HR Transformation (SAP HR Success Factors), Prescription Renewal and WBA’s Horizon programs (i.e., initiative to take advantage of Cloud technologies) to help ensure that the necessary processes and controls are in place and compliance requirements are addressed prior to go-live.  Improved rate of IT compliance (e.g., SOX, PCI, HIPAA, HI-TRUST, GDPR) by developing a framework and tools to incorporate these regulations’ control requirements within the WBA’s application implementation projects and project implementation methodologies. Increased probability of successful implementations through improved, more formal, robust and audit-ready project activities (e.g., project management and monitoring, data migration, security, testing, interfaces, go-live decision-making).  Improved internal controls environment through the establishment of sound and efficient IT processes and procedures, proper IT process documentation, better IT controls awareness and understanding of compliance requirements. Improved compliance effort and decrease in internal and external audit fees through the development of a healthy internal controls environment with IT General controls that internal and external auditors can rely on.

Chicago, Illinois, United States

Sales: $4.3B in annual revenue Hired to leverage extensive IT Audit and Sarbanes-Oxley (SOx) compliance experience and systems implementation audit expertise. Performed IT Audits for the US, Brazil and UK TWG locations in support of the external audit. Led and conducted Third Party Audits (TPA) to determine a vendor’s capability to fulfill TWG’s requirements, assess their IT risk and compliance environment. Led and performed a high-level Information Security audit of TPAs and a review of the TPA’s Service Organization Control 1 (SOC 1) audit report to assess their governance, risk and controls environment and determine their capabilities to support Citibank. Performed a TWG SOC 2 audit in support of TWG’s biggest clients. This project required the audit of SOC areas based on the Trust Service Principles, namely, Security, Availability, Processing Integrity, Confidentiality and Privacy, modeled around four broad areas: Policies, Communications, Procedures, and Monitoring.Conducted a post go-live assessment to provide the company’s executive leadership a status on the Contract and Claims’ pilot implementation’s activities and action items to improve succeeding implementations. Performed a full (substantive) audit of user’s access in the systems in scope for SOx. Also reviewed the TWG’s service providers’ SOC1 Reports providing management insights on the state of controls at the service providers and also necessary action plans to address TWG’s risk exposures, if any. Increased probability of successful implementations through improved and more formal project activities (e.g., data conversion, post go-live support, testing).  Improved internal controls environment through better IT processes and procedures, the improved user account and password controls, user access review tools and processes and improved monitoring of vendors’ internal controls environment.

Reporting to the Corporate Controller and Vice President of Accounting, is responsible for working with all senior leaders across the company including Operations, to evaluate each group’s global end-to-end processes and internal controls environment. As an integral part of the EGS global Business Transformation journey facilitated by the implementation of SAP, responsibilities include the improvement of end-to-end business processes, ensuring data conversion completeness and accuracy, maximizing SAP capabilities while enhancing the company's internal controls.

Geneva, Il

Client: Expert Global Solutions (formerly APAC Customer Services, Inc.)Reporting to the Vice President of Internal Audit, was responsible for working with the Business Transformation (BT) leadership to ensure that all enterprise BT initiatives satisfy the appropriate business, policies and risk and internal controls requirements. Developed the methodology and program for performing a Governance reviews (similar to pre and post-implementation audits) focusing on project governance, process and controls, data conversion and management, testing, reporting, and go-live activities. Led and executed Governance reviews on SAP implementations (e.g., Purchase to Pay, Hire to Retire, Financial Reporting) resulting in the improvement of processes and controls and the formal documentation of the process narrative, flowcharts and risk and controls matrices. These documents were used in the annual SOX audits.

Greater Chicago Area

Responsible for developing, implementing, improving and maintaining the business process controls and IT General Controls that is rolled out as part of the global SAP implementation. It includes these processes: (Order to Cash, Purchase to Pay, Manufacturing and Inventory Management, Financial Close, Advance Planning and Optimization, Marketing Equipment Management, Trade Promotions Management. This is the first time a global controls template has been successfully implemented at PepsiCo and this template has saved each country (25+ countries so far) at least $1.3 Million in controls development cost. Acted as the subject matter expert on business, IT and SAP configurable controls and enabled SAP and controls leading practice sharing across all global SAP markets. Developed the Risk Assessment methodology used for the global SAP controls. Performed and led the annual Risk Assessments and optimization for all business processes to ensure that new risks are identified and addressed and that the current controls set are improved and optimized.

Greater Chicago Area

Responsible for establishing, maintaining and executing the annual IT audit plan, composed mainly of Sarbanes-Oxley (SOX) compliance audits. Focus areas included development of the audit schedule (based on the risk assessment), coordination and planning with the business units, management of the audits, reporting of audit results to executive management and coordination with the external auditors. Acted as a subject matter expert on IT auditing and compliance concepts.

Greater Chicago Area

Responsible for establishing, maintaining and executing the IT audit plan for more than 20+ clients, in support of their financial audits. Focus areas included client relationship building, IT audit planning and integration into the financial audit, project management, execution and monitoring, and client management reporting. Acted as a subject matter expert on IT compliance issues and topics. Audits included IT General Controls reviews, Enterprise Resource and Planning (ERP) configuration and security reviews, process improvement reviews, application security reviews, technical infrastructure (e.g., Unix, NT, Oracle database, RACF/ACF2, mainframe) reviews, and Attack and Penetration reviews. Planned, executed and managed various IT assurance projects. Examples are SAP integration testing efforts, ERP (PeopleSoft, SAP and Oracle Financial) process reviews and managed Pre-Implementation Reviews. Actively involved in E&Y's preparation for the Sarbanes-Oxley audits by serving as one of the SOX trainers in the Lake Michigan area.

Master'S Of Business Administration, Partial

Bs, Civil Engineering