Manager Management
Resume:
William L. Bolella, CISA
Wantage, NJ 07461
********@***.***
Seasoned IT Manager & Audit Professional with comprehensive experience in all aspects of
Information Technology, IT Management, and IT Audit & Compliance. Routinely partnered with
executives and senior management. Significant experience in Pharmaceuticals, IT Services &
Software. Extensive and varied technical background. Strong expertise in compliance, FDA
Regulations & Sarbanes-Oxley, Risk Assessment & Strategic Planning. Expertise & experience
includes:
Large Project Management IT Risk Assessment Strategic Planning IT Audit &
Compliance FDA Regulations GMP GLP Part-11 & Electronic Records / Signatures
SOX CSV SAP SAP HR SAP Validation ERP Systems JDE AS/400 UNIX IT
Infrastructure Data Center Management IT Security SDLC CAPA LANs / WANs
D/R BCP IT Security Payroll & Benefits Financial Applications Pharmaceutical /
Medical Device Manufacturing International Experience Desktop Management IT
Policy Development SOP Generation Global Compliance, Implementation & Support
Outstanding Communication and Presentation Skills
EDUCATION & CERTIFICATIONS
Doctorate (dissertation in progress), Stevens Institute of Technology – Information Management
Masters of Science, Stevens Institute of Technology - Management / Information Management
Bachelor of Science, Rutgers University - Computer Science
CISA – Certified Information Systems Auditor
Certificate of Proficiency in German from the Goethe House
Completed SAP HR training with Leading Training Inc.
PERFORMANCE HIGHLIGHTS
Restructured compliance environments leading to a reduction in controls of 10 -20% with a
reduction of testing failures to near 0 and an overall reduction of effort and regular test times
Reversed external audit findings on SAP launch resulting in successful rollout and the savings of
$250,000 in additional fees.
Reduced time and expense of external SOX reviews by bringing select testing in house.
Realized $200,000 in software license revenues via the integration of support & billing systems
Regularly completed projects on-time and within budget.
Experience with global compliance requirements as well as the roll -out and support of
international consolidated financial reporting
Handled multiple data center moves and platform migrations on-time, under budget & without
service interruptions
Reduced SDLC completion times & reporting while tightening controls through improved
workflow
Managed Integrated Audit Teams of 12 or more. Supervised Technical Staffs of up to 7.
William L. Bolella, CISA Page 1 of 3
PROFESSIONAL EXPERIENCE
MOUNTAIN LIGHT CONSULTING, Sussex, NJ 2008
President - Independent Consultant, engagements included:
Compliance Consultant – Becton Dickinson
Handled on-going SOX 302 & 404 compliance activities – tracking & closure of internal control gaps and
weaknesses; periodic testing; control design & operational effectiveness evaluations; root cause analysis
& the development of remediation plans. Conducted SAP Gap analysis for global upgrade and migration
to ECC 6.0. Coordinated and conducted compliance reviews for global SAP implementation teams.
Identified compliance requirements relevant to each SAP design component for SOX, FDA (GMP, GLP,
Part-11, 820), HIPPA, & ISO.
LOEWS CORPORATION, New York, NY 2007
Director Information Technology Auditing
Established risk models, planned audit schedules and prepared budgets for highly diverse technical
environments including AS/400, UNIX, SAP, JDE, Oracle, Linux, Client-server and Mainframes
Selected new technology and audit tools for the corporate internal audit department. Coordinated
communication activity between different IT organizations & Infrastructure groups to facilitate cross-
organizational audit functionality. Set IT audit & documentation standards and reviewed and approved
all IT audit plans. Reviewed Disaster Recovery & Business Continuity Plans for all held companies.
Streamlined SOX controls for select subsidiaries – hotels, energy & consumer products. Advised
subsidiaries on technology selection, COBIT, COSO and changes to Key Control Structures.
Coordinated audits with external entities for SOX, financial audits, PCI & penetration testing
Partnered with senior management in the formulation of remediation strategies for high impact and
significant findings. Counseled subsidiaries in the generation of relevant changes (policy, process &/or
technical) in order to correct deficiencies and ameliorate risk.
AUTOMATED DATA PROCESSING, Roseland, NJ 2005 to 2007
IT Manager SOX Compliance
Managed IT compliance activities involving section 404 of the Sarbanes-Oxley Act for all Employer
Services IT groups. Compliance activities included: Assessing IT risk in keeping with best practices,
directing audits; training & mentoring of staff; training group IT staff and management on testing and
reporting requirements; partnering with ES management to correct compliance failures; establishing &
publishing best practices in keeping with COBIT, COSO & ITIL; developing or updating SOX key
controls & testing regimens; and integrating compliance requirements into new systems, operations and
applications. Routinely tapped to lead large-scale and complex remediation projects. Evaluated new
technology and systems for use by the compliance group. Developed acquisition audit plans.
BOLELLA CONSULTING, INC., Sussex, NJ 2001 to 2005
President - Independent Consultant, engagements included:
Compliance Consultant – Engelhard
Conducted compliance review of the parent company’s JDE implementation. Identified Gaps, Risks &
corrective actions. Presented findings and recommendations to JDE steering committee.
Global Regulatory Compliance Consultant – Schering Plough
Conducted review and remediation of manufacturing and laboratory systems at global consent decree
sites. Advised site management on gaps, remediation strategies and agency expectations. Performed
validation work as needed. Assisted in the formulation of BCP plans to allow for the restoration of
William L. Bolella, CISA Page 2 of 3
systems to a properly validated state post incident. Involved in root cause analysis and CAPA. Work
was international in scope and involved heavy interface with all levels.
Manager of Data Migration SAP Implementation – American Pharmaceutical Partners
Manager responsible for the migration & load of legacy information into SAP. Responsible for overall
data integrity of implementation and the selection of data load strategies. Established project plan, quality
metrics and coordinated activities of AS/400 legacy & SAP development teams. Managed DB2/400 data
clean up and exportation. Trained technical team on relevant regulatory requirements – GMP, 21 CFR
Part-11 & SOX.
Consulting manager - Schering Plough Research Institute
Chaired steering committee for a 400-user desktop migration project. Set project direction & schedule,
managed & ameliorated risks, coordinated testing, validation, and prepared end-user community for roll-
out. Architect and developer of new computer system validation processes documentation templates,
SOPs & policies. Developed an FDA audit preparation program and risk model for the division
encompassing all aspects of GLP, GMP & 21 CFR Part-11 regulations.
University of Phoenix Online
Member of Graduate Faculty teaching IT Risk Assessment, and IT Strategic Planning
KNOLL PHARMACEUTICAL COMPANY, Whippany & Mt. Olive, NJ 1991 to 2001
IT Audit Manager Western Hemisphere / Systems Manager
Regularly interfaced with senior management in a global matrixed environment; routine partnering with
business units and executives to establishing strategic IT plans and aligning them with business
objectives; coauthored key IT policies. Frequently handled special & sensitive projects in a cross-
functional capacity for executive management. Reviewed and reported on the coordination and
performance of IT initiatives across Lines of Business. Directed all IT activities within integrated audits.
Assisted site management in the formulation of business continuity plans and testing.
Systems Management covered all aspects of IT Management including budgets; technology & vendor
selection; operations management; Business Continuity planning; Y2K remediation; managing staff,
system support, & security administration. Oversaw new data center development for a pharmaceutical
manufacturing facility. Managed two data center moves. Implemented & supported consolidated
financial systems for all Latin American Subsidiaries. Planned & directed annual disaster recovery /
business continuity testing. Liaison with German speaking counterparts.
MISCELLANEOUS
U. S. Citizen; Health Excellent; Foreign Languages German; Valid Passport
Dale Carnegie Graduate
Former Vice-President and Board Member of the Mountain Club Tenants Corp.
William L. Bolella, CISA Page 3 of 3
Contact this candidate