Customer Service Management

ERIC M. KHELAS, CISA

**** ****** **** ****, **********, TX 75080

972-***-**** home 214-***-**** cellular

*******@*****.***

Multi-lingual CISA certified Senior IT auditor with over five years of

audit experience (including 4 yrs within a Big 4 Public Accounting

firm) along with exposure to various industries such as manufacturing,

oil & gas, telecom, revenue assurance, internet and financial services

(+10 years of work experience in total).

EDUCATION

Master of Business Administration in Finance

1995

Bachelor of Business Administration in Marketing

1990

The University of Texas at Arlington, Arlington, TX

Currently studying for CISSP Certification (exam to take in

Oct. 2010)

EXPERIENCE

Capital One Auto Finance. New Orleans, LA & Plano, TX

Sept 2009 - June 2010

Corporate IT Auditor (Contract Position through Staff Focus

LLC)

. Assisted Corporate IT Audit Group with various assigned tasks such as

SOX audits & special projects such as documentation of Capital One

Risk Management & Controls Framework (RMCF).

. Performed risk assessments of business activities, potential exposures

and the materiality of loss for Treasury Management applications

(Treasury Optimizer & TowerNet).

. Designed and performed appropriate audit procedures to verify the

effectiveness of existing controls, identify and defines issues,

review and analyzes evidence, and document auditee processes and

procedures.

. Performed & led audits of various internal and outsourced financial

systems applications for different business units.

TXU Energy (TXUE). Irving, TX

Nov 2008 - Feb 2009

SAP IT Auditor - (Contract Role through Accretive Solutions)

. Identified and defined SAP IT General Controls to be tested during

implementation phase of CRM (Customer Relationship Management), IS-U

(Utilities) and BI (Business Intelligence) modules on SAP ECC6

platform to replace various existing legacy systems.

. Performed testing of IT General Controls around SAP Basis & Security

focusing on areas of logical access, change management and other

general controls (backup & recovery, job scheduling & physical

access).

. Reviewed SAP configuration settings to determine if configurable

system controls are being used appropriately.

. Reviewed SAP application security profiles to assess how application

security is being used as a part of the overall business process

control environment.

. Performed segregation of duties testing on SAP application security

profiles.

. Documented test results and presented audit findings to upper

management.

Ernst & Young. Dallas, TX May 2004 - Oct 2008

Senior IT Auditor (TSRS - Technology & Security Risk Services)

. Performed data analytics and data mining projects for financial audit

team using Computer Assisted Auditing Techniques (i.e. JE CAATs) and

tools such as Audit Control Language software (ACL).

. Collaborated with other members of the engagement team to plan the

engagements and develop work programs timelines, risk assessments, and

other planning documents. Interacted with financial audit team to

document the business processes dependent on information technology.

. Led engagement teams of 2-3 Staff Auditors during planning, execution

and reporting phases of various IT and business process related

audits. Was also responsible for detailed review of workpapers

prepared by staff.

. Designed and helped client implement & maintain information security

policies, standards, procedures, and guidelines (e.g. Sarbanes-Oxley

and Information Security).

. Developed and updated IT control audit programs and test scripts for

Application Security, Change Management, Operations as well as various

application controls to assess the design and operating effectiveness

of key internal controls.

. Performed testing of complex IT general controls and application

controls. Identified efficiencies in testing, reducing overall

budgeted hours.

. Managed the execution of the audit process including opening/closing

meetings, execution, drafting and finalizing the audit reports for

senior management.

. Strong knowledge of SAS70 engagements.

. Extensive knowledge of COBIT and COSO framework.

. Experience with Sarbanes-Oxley 404, Audit Standards S 2.0 and 5.0,

GAIT (Guide to Assessment of IT General Controls) Methodology,

identified critical IT functionality areas, applications based on risk

and ITGC process risks, and related control objectives.

Neiman Marcus Information Services. Irving, TX

April 2003 - Jan 2004 Finance / Telecom Auditor (Contract

Position through Resulte Inc)

. Performed billing analysis, invoice auditing and monitoring of telecom

expenses for all locations.

. Conducted research and analysis to provide management with

financial/statistical data and advice for their use

in setting and realizing profit objectives.

MCI/Worldcom. Richardson, TX

Sept 2002 - April 2003 Research Analyst (Contract

Assignment through KForce)

. Researched corporate addresses for creditors in preparation for mass

mail-out of court documents, compilation

of schedules using Excel spreadsheets with incremental submissions to

Project Leader, special assignments related to Top 100, 200 and 500

vendors.

ACS (Affiliated Computer Services). Dallas, TX

Jan 2001 - Aug 2002

Billing Analyst

. Assisted project managers to resolve issues with circuits, voice and

data lines not in database

. Provided monthly accruals to project managers to explain monthly

billing variances.

Project Management: Telecom Audit Project (Crawford Insurance

Company)

. Prepared provisioning recommendations for the migration of desirable

local and long distance (AT&T ONENET) services. Provided analysis of

voice & data systems and recommendations for annual cost savings of

$1,000,000.

KPMG Consulting. Dallas, TX

May 2000 - Nov 2000

Management Analyst (Project Consultant)

Client: Southwestern Bell Long Distance. IT Group. Richardson, TX

. Executed incoming Table Change Requests (TCRs) in areas of Price Plan,

Customer Service Management (CSM), Accounts Receivables, Billing and

Security using SQL Plus 8 or Telegence LD Online Price Plan Tool.

. Completed LD Telegence Table copies and saved them into production

environments using UNIX, SQL and

on-line Price Plan Tool

LANGUAGE SKILLS

French (native speaker), English (fluent), Spanish

(conversational)

CERTIFICATIONS/AFFILIATIONS

CISA, Certified Information Systems Auditor, 2009

Member of ISACA (Information Systems Audit and Control

Association)

COMPUTER SKILLS

Accounting & Financial systems: Lawson General Ledger, Peoplesoft

7.5

Auditing Softwares: AutoAudit

ERP Packages: SAP ECC6, Oracle Financials 11i, JD Edwards

Operating systems: Windows XP, Windows 2003, UNIX (HP-UX, AIX,

Sun Solaris), AS400

Network Security: Dumpsec tool (Windows)

Programming languages: PL/SQL, SQL & COBOL

Application softwares: Microsoft Office 2007, SAS, PowerPoint

Databases: Access, Oracle 9i, Sybase, MS SQL Server

Billing applications: AT&T Billing Edge, Kenan Arbor 7&8

Service & Support applications: Peregrine, Lotus Notes 6.5

Data Analytics: ACL version 8.3, E&Y Global Analytics (used for JE

CAATs)

Contact this candidate