IT Auditor / IT Examiner / IT Compliance Analyst
> CISA (IT Audit) certification
> CQIA (quality) certification
> MS Business in Project Management of SDLC
> BS Business in Information Systems
> international / overseas consulting experience
> 15 years of IT experience
> Big 4 & Fortune 500 experience
> corporate technical and user support experience
> 5 years of audit skills experience
> commercial software development experience
> 15 years of experience in IT auditing, software development, quality
assurance testing, user training, technical and user support, training
and technical documentation, international consulting, and project
management for corporations, including the Fortune 500 and Big 4
consulting firms.
> Seeking IT Audit / IT Compliance position with design and project
management responsibilities for SOX compliance, operational internal
auditing, business continuity, or SAS 70, with international travel.
Professional Experience (15 Years)
COCA-COLA ENTERPRISES (food manufacturer & distributor) Atlanta, GA
IT Compliance Analyst II 2008 - 2008
. Managed the remediation work of post audit exceptions
. Collected and self-assessed evidence from SAP, AS/400 and other systems
for later examination by auditors
MOORE COLSON (CPA consulting) Atlanta, GA
Senior IT Auditor 2005 - 2008
. Interviewed client IT staff for resolution of previously identified audit
violations or weaknesses
. Designed and performed IT general controls testing for Sarbanes-Oxley 404
compliance per Ernst & Young
. Concluded findings and recommendations for risk reduction and policy
compliance
. On site in-charge project manager with staff for SOX 404 compliance
project in another state
. Systems audited: Top Secret for mainframe, AS/400 (iSeries), Windows OS,
Unix, Windows based software
. Examined mainframe, AS/400, LAN and financial software for risk potential
and Sarbanes-Oxley compliance
. CObIT tests: AI6 Changes, DS5 Access / Security, DS10 Problems, DS11
Data, DS12 Business Continuity
. Controls Tested: SOD of testing and installation, proof of testing,
approval for promotion, etc. for AI6
. Controls Tested: user provisioning, password configuration, logical
access, logging, SOD, etc. for DS5
. Referred to SAS 70 reports for evidence gathering
. Monarch software programmer (data mining / data query tool) of financial
data
. Clients included a $119 million healthcare company and four subsidiaries
of a $10 billion manufacturer
. Moore-Colson is a Top 25 Accounting Firm per the Atlanta Business
Chronicle Book of Lists
LEASEPLAN USA (corporate auto leasing) Atlanta, GA
Senior Software Developer, User and Programming Support 2001 - 2004
. Programmed internal controls with audit trail facilities (e-mail
notification in real-time, batch total recording for history, error re-
cycling facilities) of A/R application
. Recommended and designed improved internal controls to A/R application
. Completed audit review program to discover audit violations and
weaknesses in A/R application
. Wrote technical and business work flow documentation and process flow
diagram
. Ad hoc project manager of new business processes to recover invoices
. SQL and COBOL computer programmed A/R application
DELOITTE CONSULTING / CMD SYSTEMS (technology consulting) Atlanta, GA
Project Manager 1999 - 2000
. Planned schedule and budget for a Unix to AS/400 (Infinium) data
interface project
COCA-COLA ENTERPRISES (food manufacturer & distributor) Atlanta, GA
AS/400 COBOL & RPG Senior Software Programmer, Programming Support 1996 -
1999
. COBOL programmed an AS/400 - hand-held-computer data interface of order-
entry data
. Fixed RPG & COBOL programs for various applications concurrently
Functional Resume By Audit Skills
IT Auditor, IT Quality Analyst, Software Tester, Business Analyst
. Audited Oracle system in Hyderabad, India for Sarbanes-Oxley compliance
with international auditors (PRI)
. Interviewed IT staff for resolution of previously identified audit
violations or weaknesses (Moore-Colson)
. Examined mainframe, AS/400, LAN and software for risk potential and
Sarbanes-Oxley compliance (M-C)
. Designed and performed IT audit tests for Sarbanes-Oxley 404 compliance
per Ernst & Young(Moore-Colson)
. Concluded findings and recommendations for risk reduction and policy
compliance (Moore-Colson)
. On site in-charge project manager with staff for SOX 404 compliance
project in another state (Moore-Colson)
. CObIT tests: AI6 Changes, DS5 Security, DS10 Problems, DS11 Data, DS12
Business Continuity (M-C)
. Referred to SAS 70 reports for evidence gathering (Moore-Colson)
. Monarch software training (data mining / data query tool) (Moore-Colson)
. Programmed internal controls with audit trail facilities (e-mail
notification in real-time, batch total recording for history, error re-
cycling facilities) of financial software (LeasePlan)
. Completed audit review program to discover audit violations and
weaknesses in software (LeasePlan)
. User-tested commercial warehouse software, DCDirector, for paper
manufacturer (IBM)
. Certified Information Systems Auditor (CISA) since 2002 (ISACA)
Technical Writer
. Wrote technical and business process documentation (LeasePlan, IBM,
Whittman-Hart, Moore-Colson)
. Wrote the User's Guide DCDriver for Shippers and implemented training
curriculum for Mizuno (IBM)
. Developed a Programmer's Manual for Trugreen-Chemlawn (Whittman-Hart)
. Prepared the Modem Analysis Statistical Report (Ameritech Applied
Technologies)
. Wrote documentation and description of Material Inbound application for
Reynolds Metals (Whittman-Hart)
. Made presentation to bank vice-presidents of training and IT (First
National Bank of Chicago)
Project Manager
. On site in-charge project manager with staff for SOX compliance project
in another state (Moore-Colson)
. Planned schedule and budget for a Unix to AS/400 (Infinium) data
interface project (Deloitte Consulting)
. Ad hoc project manager of new business processes to recover invoices
(LeasePlan)
. Authored a software development project management methodology (Keller
Graduate School)
. MS business degree in Project Management of Software Development Life
Cycle (Keller Graduate School)
Certifications
. CISA, Certified Information Systems Auditor by ISACA since 2002, #
0330916
. CQIA, Certified Quality Improvement Associate by ASQ since 2004 # 2719
Education
KELLER GRADUATE SCHOOL OF MANAGEMENT
Atlanta, GA
MS business degree, Project Management (Software Development Life Cycle)
. Authored a software development project management methodology
. Managing Quality, Contracts & Procurement, Cost Control & Risk
Management, SDLC project management
UNIVERSITY OF ILLINOIS AT CHICAGO
Chicago, IL
BS business degree, Information and Decision Sciences
. Project Manager of 5 students to develop multi-software PC system for
bank VP of Training in 10 weeks.
Training
. SAP ERP Technical Auditing, 36 CPE, IIA/Deloitte, Chicago, IL 2010
. Auditing, ACC 403, 4.5 quarter credit hours, Strayer University, Atlanta,
GA 2010
. SAS 70 Auditing Guidance, 12 CPE, AICPA, 2006
. Information Technology Auditing, 16 CPE, Western CPE, 2005
Skills
. Monarch (data mining / data query tool), MS Access, MS Project, SQL,
AS/400 DB2, COBOL/400, RPG, CL