Dennis J. Kabelac, CISA

** ***** **. ( Norwalk, CT. 06855 Home 614-***-**** Cell 614-***-**** (

abg4nv@r.postjobfree.com

SUMMARY

Information Technology Audit Assurance Manager with over 20 years

experience in banking, consulting, manufacturing, and healthcare industry.

Solutions-oriented, experienced in training, supervising staff, budgeting,

scheduling, performing risks analysis, directing multiple on-going complex

audits and facilitate the inclusion of proper internal controls for various

projects within an organization.

. Extensive experience in supporting and implementation of some of the

following systems and technologies: Network Security and management,

Web based Applications, UNIX, Windows, and Oracle database; Auditing

against industry standards, guidelines, and methodologies for

information security and controls such as COBIT, COSO, Sarbanes-Oxley,

and ITIL.

. Perform audits and business process reviews to provide improvements

where needed including reliability.

. Managing all elements of audit projects, including development of work

plans, assigning teams, reviewing & tracking progress,

identifying/reporting issues and ensuring quality.

. Demonstrated experience in leading IT project audit assignments by

designing audit programs based on a risk based approach, identify and

report on control weakness, and provide recommendations for potential

process improvements.

. Ensures that the company's project IT audit plan is in compliance with

the Sarbanes-Oxley Act and also conduct risk assessment to develop an

annual Information Technology IT audit schedule that achieves an

appropriate balance of risk acceptance and avoidance.

CORE COMPETENCIES

ACL Banking Business Analysis

Client Management COBIT / COSO Consulting

Control Specialist FISCAM Information Technology

IT Auditing ITIL Operational Auditing

Project Management Risk Assessment Penetration Testing

SAP / Oracle SOX Staff trainer

Team Mate

PROFESSIONAL EXPERIENCE

HORIZON TECHNOLOGY PARTNERS, 2010 - Present

Pallatine, IL. - PepsiCo

International

IT Consultant / Contractor

. Troubleshoot connectivity issues between desktop and servers for the

Corporate Audit group.

. Manage Audit Management System (AMS), BizRights, and Teammate

configurations and issues that occur with the servers and the

applications.

. Support how-to-issues with business users of audit and finance.

. Develop procedures for support areas and other areas as assigned by

management.

. Presently training on Certus (SAP) and Hyperion.

PARK NATIONAL BANK, Newark, Ohio 2005 - 2009

Manager IT Audit

. Perform control reviews on systems development operation, programming,

security procedures and standards in support of internal and external

audits.

. Extensive background in all stages of audit including planning, study,

evaluation, testing of controls, reporting follow-up and managing.

. Performed feasibility study on workpaper automation tool (TeamMate),

negotiated contract with vendor and participated in the implementing

and training audit staff.

. Worked closely with cross functional teams from business units, IT and

other data/systems providers (internal and external) to enhance

systems, trouble-shoot data issues, ensure compliance and make

recommendations for improvement.

. Designed end-user computing change management process for IT which

identified key controls within the process.

JP MORGAN CHASE,Columbus, OH 2003 - 2005

Senior Risk Advisor, IT Audit

(Vice President), Retail Audit Team

. Planned and executed technical and general computer IT audits,

systems development / conversion reviews, and business process /

applications controls reviews.

. Performed in-depth IT control assessments, documented test

requirements, and suggested remediation alternatives where required.

. Reviewed systems including MainFrame, Unix and Oracle Databases

(Oracle and Sequel Server). The results identified improvements such

as excessive access to the applications, improper program change

control, and excessive database administrator access.

. Participated in the Disaster Recovery and Business Continuity project

on critical Mortgage Bank Computer Systems and Business Processes.

. Participated in two bank merger development conversions that included

name change for all Chase websites and implemented new hardware for

Mortgage Bank midrange architecture. The results revealed project

plans did not identify the need to review or change security access.

JEFFERSON WELLS INTERNATIONAL, Columbus, OH 1999 - 2003

Professional Consultant - IT Audit

and Security

. Performed network vulnerability assessments for healthcare provider,

and major manufacturing company. Results included recommendations in

policy remediation and selection and implementation of countermeasures

such as intrusion detection system, firewalls and host security

safeguards.

. Conducted Oracle, SAP and legacy system reviews for various clients to

support products and ensure business objectives were met.

. Planned and executed various ERP Post-implementation reviews for

Cincom, Oracle and SAP systems.

. Superior communication skills presented to teams, audit committees and

peers. Effective public speaker; delivered presentation to group of 40

on "Risk Based Auditing".

. Completed business process reviews of Accounts Payable and Accounting

groups,which included the use of SAP and Oracle, the results showed

processed were not used as designed prior to implementation.

CARDINAL HEALTH INC.,Dublin, OH 1998 - 1999

Senior Information Systems Auditor

ASHLAND INC. - Dublin, OH 1996 - 1998

Senior Information Systems Auditor

Nestle USA - Solon, OH. 1990 - 1996

Senior Information Systems Auditor

Additional Organizations

May Department Stores Company - Cleveland, OH.

Ohio Savings Bank - Cleveland, OH.

National City Bank - Cleveland, OH.

EDUCATION & CREDENTIALS

Bachelors Accounting (Business Administration minor), Baldwin Wallace

College, Berea, Ohio

. Worked throughout school to finance 100% of tuition and book costs

Associate Degree, Computer Science

Cuyahoga Community College, Cleveland, Ohio

AFFILIATIONS

Ceritified Information Systems Auditor (CISA)(048106)

Institute of Internal Auditors (IIA)

Information Systems Audit and Control Association (ISACA) - Past President

Speaker at monthly meetings and seminar on Risk Based Auditing.

SKILLS

Databases: Oracle11g, SQL, Access, SAP, JDEdwards

Operating Systems: Microsoft Windows Vista/XP/2000, MVS, UNIX HPUX,

Unisys, and OS/400 Windows NT, Windows 2000,Windows Server 2003 / 2005,

Unix, Linux, HP UX, AIX, Novell 3.11, Novell 3.12, Novell 5, MS-DOS.

Software: ACL, Citrix WinFrame, Client Server, COBIT, COBOL, Crystal

Reports, Disaster Recovery, Kronos, Lotus Notes, MS Access, MS Office

(Word, Excel, PowerPoint, Project), MS-SQL Server, ISS Security Tool Set,

Oracle, PVCS, RACF, Sarbanes-Oxley, SAP, Source Safe, Visio, ITI, and

Fiserv

Hardware: IBM Systems, AS/400, RISC/6000, HPC3000, Dell, Compaq, Cisco

Routers, IBM Thinkpads, Compaq Deskpro, Barracuda, Cisco CE7305, Cisco CDM,

Cisco 6500, Cisco 7500, Cisco PIX 515, 535, Voice Over IP, IBM 3090, IBM-

PC.

Contact this candidate