With more than seventeen (17) years of combined professional experience in external and internal audit covering IT and business process audit. Six (6) of those years was in Sycip Gorres Velayo (SGV) & Co., which is the number one auditing firm in the Philippines and the the Philippine member practice of Ernst & Young Global (one of the “Big 4” auditing firms). Handled several audit engagements related to review of IT and business process risks and controls in various industries such as global manufacturing, education, semiconductor, telecommunications, utilities, selling and distribution, hospitality, and services.
CIA since 2013, CISA since 2007, and CPA since 2003. Extensive background in all stages of audits including planning (process understanding, risks and controls assessment), testing of controls, reporting, and follow-up.
Knowledgeable of international audit standards and methodology e.g., COBIT, COSO, IPPF, and ISO/IEC 27001/2.
Major responsibilities are: to participate in the audit planning and execute the audit engagements based on the audit plan, ensure proper and adequate documentation of audits performed, update the audit manager regularly on status of audit engagements, prepare audit observations and discuss audit findings to appropriate management, conduct follow-up audit, execute special reviews as requested by management, policies and procedures review, and assist the Audit management in other administrative tasks and team development (e.g. IA budget preparation, KPI reporting, built and maintenance of the follow-up action tracker in Excel, implementation and administration of the audit management system).
Reporting both to the Corporate Audit Head and Corporate SOX Manager. Major responsibilities are to manage IT Internal Audit projects and IT audit reviews for SOX compliance including preparation of audit guidelines and templates, conducting business process review, review staff audit working papers and reports, and managing/conducting IT general controls review, segregation of duties review, and validation of key spreadsheets and reports. These audits require periodic travel to Asia and United States of America (USA) and coordination with various employees in several sites. Other administrative responsibilities are to maintain the team's SharePoint site and designing and maintaining the SOX status reporting in Excel where data is linked from SharePoint.
Reporting directly to the Assistant IT Audit Manager. Major responsibilities are to train the local Emiratis in performing IT audit and to supervise all aspect of the IT audit process from planning to reporting. Led the preparation of currently followed IT audit guidelines, work programs, and reporting templates of State Audit Institution of UAE and facilitated introductory trainings for the IS auditors and financial auditors.
Reporting directly to the Audit Directors, if there is, if not directly to the Audit Partner. Major responsibilities are to supervise all aspect of the IT audit process, training associates, and assist the managers in evaluating needs of the client for further audit service opportunities.
Audit Management
Certified Internal Auditor (CIA)
Certified Internal Auditor (CIA)
Certified Information Systems Auditor (CISA)
Certified Public Accountant (CPA)