Experienced Senior IT Auditor with a highly accomplished leader with progressive experience in IT audit, strategic development of Control Information Systems, E-commerce, Telecommunication and Networking projects in South America. With a extensive experience in IT SOX 404 for America public companies as internal and external auditor.
Areas of Expertise:
Performing IT Audit efforts for Oil, Electricity and Gas Companies in USA and Latin America as internal or external Auditor.
Leading the IT Risk Management information technology in different areas
Analyzing and evaluating the efficiency and effectiveness of IT internal control for IT Process.
Documenting and testing IT general controls design and operating effectiveness for SOX compliance using CobIT framework across diverse client environments.
Analyzing and evaluating IT organizational structure, IT services, and IT assets to provide gap assessment and improvement recommendations to help organizations mature IT processes, reallocate resources, and align activities to better support business objectives based on ITIL and IT service management principles.
Documenting IT Process and procedures to help SOX remediation efforts for International companies.
Managing Control Information technology projects from early stages of development through to implementation.
Managing multiple simultaneous technology projects utilizing Project Management Institute’s project management best practices.
Managing projects including overseeing cross-functional teams.
Lead Information technology for the second largest Utility Company in Colombia (Energy, Water, and Telecommunication).
Developing information systems solutions for banking, commercial and financial services.
Coordinating IT Audit with External Auditors and third party consulting firms.
PROFESSIONAL EXPERIENCE
Senior IT Auditor , UHY, Houston, Texas 2007 - Present
Performed IT Audit efforts for Oil, Electricity and Gas companies in USA and Latin America as internal or external auditor.
Evaluated the efficiency and effectiveness of IT internal control for IT process.
Evaluated the efficiency and effectiveness of Applications controls.
Designed and implemented of the IT Control metrics for Chemist, Polymers, Oil, Gas and Electricity companies in America and oversea.
Executed and monitored SOD conflicts with the use of SOD tool (Compliance and Calibrator) SAP GRC.
Senior Internal Control Analyst, Eagle Global Logistic, Houston, Texas 2006-2007
Defined and created IT SOX controls documentation for IT process and procedures. Identification of design gaps for Latin America, Mexico and Canada controls for 2006.
Evaluated the efficiency and effectiveness of IT internal control for select IT processes.
Assisted with remediation efforts and tracking for Latin America, Mexico, Canada and roll-out of guidance for IT for Tier2 and Tier 3 countries.
Organized End User Tools (Spreadsheets) for SOX Documentation and testing.
Audit IT Project Consultant, GCRM Solutions, LLC (Merge UHY-US), Houston, Texas 2005-2006
IIT Audit SOX (IT General Controls) for different medium and small public companies in the Texas area.
Evaluated the efficiency and effectiveness of IT internal controls.
Performed the quarterly and annual information technology testing to ensure compliance with section 404 of Sarbanes-Oxley.
Good understanding of COSO, ITIL and COBIT framework.
Manager GRMS-ORMS, PriceWaterhouseCoopers, Cali, Valle, Colombia 1999 - 2000
Lead Global Risk Management Solutions (GRMS-ORMS) practice for Colombia.
Analyzed operational and systems risk management. External customers included major corporations in Colombia and South America and American companies with branch offices in Colombia. These companies have Information systems in SAP, JDEDWARDS, PEOPLE SOFT, etc.
Assisted clients in maximizing their business performance by integrating strategic change, process improvements, and technology solutions.
Provided support during the financial audits and telecommunications audits.
Performed audit of the information system.
Manager of Information System Department, Empresas Municipales De Cali, (Cali’s Public utilities Company Services included Telephone, Electricity generation and distribution, Water and Sewage for 3M customers), Cali, Valle, Colombia, 1992 - 1998
Administered information system for commercial areas (energy, water and telecommunications), and for financial and human resources departments.
Developed Geographical Systems for Public Services Utility.
Planned and coordinated security, disaster recovery and contingency plans for information systems including hardware and software.
Information Systems Project Coordinator, CompuSoftware, Cali, Valle, Colombia 1990 - 1992
Managed projects for a software development company.
Developed and marketed software for legal, commerce administration, and industrial customers.
Developed information system in Dataflex, FoxPro, RPG, Cobol, Oracle.
Developed various systems in C, C++, Pascal, Visual Basic, etc.
Information Systems Project Consultant, Valle University, Cali, Valle, Colombia 1989 - 1990
Consulted in modernization effort for Court and Judicial offices.
Developed and implemented information systems in various operating systems, including NetWare, OS/MVS, UNIX, Sun Solaris, AIX, AS/400.
EDUCATION
English as a Second Language Coursework, Rice University, Houston, May thru November 2007
Some courses towards Master of Science in Management Information Systems, Boise State University, ID 2003–2004.
English as a Second Language Coursework, Boise State University, Boise, ID 2000 – 2002
Specialization in Communications and Networking, Valle University, Cali, Valle, Colombia 1995
Bachelor of Science in Information System Engineering, INCCA Colombia University, Bogota D.E., Colombia, 1985
Language: Fluent in Spanish and Portuguese.
Certification: CISA (In Progress)
Associations: ISCA, IIA, ISSA
US Citizen