IT Senior Auditor

EDUCATION

THE COLLEGE OF WILLIAM AND MARY

Williamsburg, VA

School of Business Administration

Master of Business Administration Degree, May 2005

* Concentrations in Consulting and Operations/IT

UNIVERSITY OF NEBRASKA-LINCOLN

Lincoln, NE

Bachelor of Science in Business Administration, December 2001

Management Information Science Major

Computer Science and Economics Minors

* President of Malaysian Students Association and Student Health Aide for Residential Halls

UNIVERSITY OF OXFORD

Oxford, United Kingdom

Study Abroad Program, Summer 2001

* International Economics and Political Economics of Great Britain

EXPERIENCE

July 2005 to Present

DELOITTE & TOUCHE, LLP - Mclean, VA

IT Audit Senior Consultant – Audit Enterprise Risk Services (AERS)

* Performed Sarbanes-Oxley (SOX) Top-Down Based Risk Assessment utilizing COSO and internal risk models to conduct Sarbanes Oxley internal controls assessments at multiple client locations.

* Served as lead ERS team engagement senior in performing testing and documentation of effectiveness of Information Technology General Controls (ITGCs) according to Auditing Standard No. 5 for various computing environment.

* Performed integrated audit with the Financial Audit Team while leading multiple staff consultants and coordinating staffing and administration. Worked closely with management to integrate engagement scope & deliverables while using COSO and COBIT frameworks.

* Met with upper management, including directors and CIO’s to discuss observations and to provide recommendations.

* Performed walkthroughs, documentation and testing of ITGCs relating to SQL Database Application System (Great Plains, Solomon (Microsoft Dynamics SL)), Phoenix, MAS 200, iMIS (Revenue Billing System) and Active Directory.

* Led ITGC team by providing guidance and direction in performing OE assessment of remediated PeopleSoft and Quantum application access controls.

* Assumed lead senior role and led ITGC team by providing guidance and direction in performing operating effectiveness application assessment for controls related to HomeSteps Connect and MultiFamily Multi-Suite user provisioning and access recertification.

* Identified and evaluated application control risks while providing recommendations for improving internal controls. Conducted Data Center Reviews.

* Performed tests and walkthroughs on Deltek Costpoint ERP system and Softrax Billing & Revenue Management System.

* Led multiple staff consultants & performed assessment of the implementation, configuration and administration of the Windows Active Directory logical security tools and techniques that enable the restriction of access to programs, data, and other information resources.

* Led & performed Infrastructure Security Audit assessment using SekChek Automated Security Review tool to identify security weaknesses, security implications of each identified weaknesses and recommended actions for remediation.

* Performed Statement of Auditing Standards (SAS) 70 Type II audit for multiple clients to provide sufficient coverage of internal controls that may be relevant to a financial audit.

* Led multiple staff consultants & performed system characterization, threat & vulnerability identification, control analysis, likelihood determination, impact analysis, risk determination, control recommendation and results documentation.

August 2004 to December 2004

BANK OF AMERICA – GOVERNMENT CARD SERVICES - Norfolk, VA

MBA Field Consulting Project

* Assessed potential impact on the paid fee structure to Visa & MasterCard and the effect of a commitment to a single association including financial implications and change of customer preference within the banking industry while focusing on Six Sigma principles.

June 2004 to August 2004

FANNIE MAE - Washington, DC

Client Services Intern – Sales and Consulting Department - eBusiness

* Enhanced lender business processes documentation, resulting in streamlined vendor engagement.

* Developed and revised/post-implementation business process maps, highlighting points of increased efficiency, increased accuracy, and decreased cycle time, which resulted in head count and cost reductions.

* Implemented "Best Practices Model" to shape and improve future lender/vendor engagements by developing customer ROI model and designing Vendor Integration Access Database to support sales and increase client-consulting efficiency.

January 2004 to May 2005

WILLIAM AND MARY MBA CAREER SERVICES - Williamsburg, VA

MBA Graduate Student Assistant

* Researched and analyzed MBA alumni database, resulting in streamlined categorical data for job search needs of current and future MBA students.

* Developed and implemented strategic plan focusing on needs of international students

January 2002 to August 2003

C. Y. T. PERUNDING CONSULTING ENGINEERS - Kuala Lumpur, Malaysia

Engineering consulting firm with consulting contracts totaling $80 million.

Project Manager and Computer Information Systems Specialist

* Managed Information Systems Department and allocated technical resources while supervising four programmers, two network specialist and two support staff.

* Analyzed and improved flow of information systems in Engineering Department, resulting in productivity flow increase of 18% per year.

January 1999 to December 2001

UNIVERSITY OF NEBRASKA-LINCOLN - Lincoln, NE

Computer Systems Specialist, Housing Information Systems

* Decreased downtime by 20% through identifying and monitoring network resources.

* Coordinated and supported 130 networked computers throughout SAP implementation, resulting in reduced computer downtime.

* Implemented Extended Markup Language (XML) programming and COLDFUSION database, resulting in increased efficiency.

CERTIFICATIONS

* Certified Information Systems Auditor (CISA), 2005

* Harvard Management and Leadership Essentials Certification

PROFESSIONAL AFFILIATION

* Information Systems Audit and Control Association (ISACA)

* ASCEND – Pan-Asian Leaders in Finance & Accounting

TECHNICAL AUDITING SKILLS

* Microsoft Great Plains, Solomon, Phoenix, PeopleSoft, iMIS, SAP, UNIX, Microsoft Active Directory, HomeStep Connect, MultiFamily Multi-Suite, SekChek, RACF for z/OS, Business Continuity, Infrastructure Security, Change Management.

OTHER

* Proficient in ColdFusion, C, C++, HTML, XML, Microsoft Office Productivity Suite

Contact this candidate