Mageshkumar Chintadripet - CISA
*********@*****.***
**** ******* **, ***********, ** 08807
H: 908-***-**** C: 908-***-****
Summary:
Certified Information Technology auditing professional experienced in
banking, financial, bio-medical, and service industry with more than 17
years of IT experience in a variety of technology platforms.
* Possess strong planning skills during IT audits in a complex
operating environment
* Develop good business relationships to stay current with business
activities and risks
* Independently identify and quantify IT risks to business,
customers, and employees
* Identify root causes of issues and develop recommendations for
corrective action that balance risk and remediation cost
* Excellent analytical, verbal and written communication skills
* Strong technical skills in UNIX, Windows, Oracle, Sybase and MS SQL
* Experienced in auditing SAP, LAN, WAN, MAN, Firewalls, routers, and
Switches, BCP/Disaster Recovery, Security, Change Management, and
SDLC
* Draft summary audit report for the Management and the Audit
Committee
Visa Status - Green Card (Permanent Resident)
Professional Experience:
American Red Cross, Washington, D.C. Mar
2010 - Present
Senior IT Auditor
. Perform pre-implementation review for a major initiative ($260
Million) undertaken by Red Cross for upgrading and supporting their
Bio-Medical systems.
. Plan, lead and perform audits of complex Information Technology
operating procedures and processing systems.
. Ensure the adequacy of controls in the Information Technology systems
and Bio Medical IT Systems for compliance with FDA 21 CFR, 510K, and
ISBT regulations.
. Identify key control points of the activity being audited, and execute
audit procedures using prescribed audit programs, ensuring each step
is appropriately and timely addressed.
. Test operating procedures and processing systems through the
performance of detailed fieldwork both domestically and
internationally.
State Street Corporation, Boston, MA
Sep 2008 - Jan 2010
Senior IT Auditor
State Street Global Markets
Performed a special project for the Research and Development division
of the State Street Global Markets. Reviewed the security
administration for the users containing read and write access to the
Researchers of the State Street Associates who perform high profile
research reports. The data that can be viewed are only limited to
researchers and can only view partial client data.
Wealth Management System, UK
Performed system development product life cycle (SDLC) and
infrastructure audit reviews for the Wealth Management System for UK
clients. Reviewed the State Street Unified Process (SSUP) consisting
of Rational Unified Process (RUP) development life cycle adopted for
both small change requests (SCR) and for longer development process
frameworks (DPF).
State Street Global Advisors
Completed IT SOX compliance review for the SSgA's Research Management
Systems (RMS) Firecall process (process to have elevated access to the
database and application). Reviewed the patch management and change
management system for RMS application.
International Fund Services and Currenex
This was a combo audit consisting of IT SOX compliance and a full
review of regular audit for the IFS and Currency Exchange system.
Reviewed the security administration, change management, patch
management, testing of input, processing and output edits for the
following systems like, Proprietary Analytics, Risk Services, Trade
Capture, and Online Trade.
Accounting Information System
Performed the SDLC review for the accounting system development
projects that receives feeds from different currency management
systems with-in State Street. The review involves the product
development life cycle for proprietary multi currency horizon system
(MCH) from the Mainframe and New Horizon which is a new web based
multi currency management system. Performed both pre-implementation
and post-implementation reviews for the AIS projects.
Global Continuity System
Completed auditing of the different business units that is required by
Federal Reserve to support business continuity for the major financial
systems supported by State Street for the retirement planning systems.
Tested the data feeds from the PeopleSoft HR system to the Risk Data
Repository (RDR) application database that is done through email and
secure FTP.
Enterprise Internet Services
Performed the SDLC review for the State Street institutional client's
internet portal (www.MyStateStreet.com) to view reports for P & L,
Private Edge, AXA Bulk Upload, OTC, Custody, Private Equity system
development projects. The review involves the product development life
cycle for Investor Technology services. Performed both pre-
implementation and post-implementation reviews for the above EIS
projects.
J.H. Cohn LLP, Roseland, NJ Jan
2008 - Aug 2008
Performed SAP audits for Security and identified security vulnerabilities.
Reviewed and assessed IT Security policies and procedures. Tested and
documented general computer controls.
United Parcel Service, NJ Jan 2004 -
Dec 2007
IT Auditor
Performed SOX and SAP internal audit work efficiently and effectively in
accordance with established audit programs. Document and test audit
procedures performed in support of audit conclusions. Adhere to department
work paper standards.
Paragon Computer Professionals, Cranford, NJ
May 2000 - Dec 2003
Team Lead /Consultant Assigned to UPS, NJ
Interacted with the user managers, develop project plans, resource
estimates and budgets. Gather and validate business requirements and
developed
Sharper Logics Inc, Atlanta, GA
Aug 1997 - Apr 2000
Consultant/Programmer Analyst
Designed and develop for auto and home insurance applications for the
client.
Login, INDIA
1996 - 1997
Involved in the design, development, testing and implementation of the
accounting system. Analyzed and developed Client Accounting System for a
Travel Company in New York.
Innovation Software Exports Limited, INDIA
1995 - 1996
As a Programmer/Analyst for a Telecommunications Company, performed the
design, development, and implementation of the Teleview Series System, a
custom product with an excellent graphics facility.
Dextro Pharmaceuticals, INDIA
1993 - 1994
As a programmer developed the Inventory control system for the company
maintained in the ware house.
Education & Professional Development:
CISA Certified - 2007
Post Graduate Diploma in Computer Education - Dec 1994 -NIIT
Masters Degree in Arts - April 1993 - University of Madras, INDIA
Bachelors Degree in Science - April 1991 - University of Madras, INDIA
Professional mEMBERSHIPS:
Information Systems Audit and Control Association (ISACA).
New Jersey Information Systems Audit and Control Association (NJISACA).
Technology Skills:
Hardware: PC, IBM AS/400, and Mainframe;
Operating Systems: UNIX, MVS, Windows NT client and Server, Windows 2003
Server and Windows XP, Mac,
Databases: SYBASE, MS SQL Server, MS Access, Oracle and DB2
Software: JDE, Lotus Notes, Visual C++, .Net, MFC, ATL, MTS, COM+, UML,
XML, Team Track, RUP, Purify, AS/400, Rational Tools, ActiveX, Crystal
Reports, IBM's Visual Age for C++, Delphi 2.0, FoxPro, Cobol, SAP, ODBC,
PVCS, Microsoft Source Safe, Web Services, Internet, Intranet, Firewalls,
Routers, Middleware (Websphere), LAN's, MAN's, WAN's, and Remote Access
Systems.
Project Management Software: Microsoft Project, Visio, and MS-Office Suite
like Word, Excel, and Power point.
Tools: MBSA, Nessus, NMAP, ACL, IDEA.