Aadil Ameerally

About Aadil Ameerally

Aadil Ameerally is a Certified Information Systems Auditor (CISA), Certified Data Privacy…

Experience

1. Director, IT Audit Services

   AutoNation

   Sep 2012 — Present

   Responsible for planning, execution and reporting of all Sarbanes-Oxley and other information technology audit projects, technology application control consultation and design review, creation and maintenance of computer assisted audit tools supporting the entire internal audit function, and supervision of both in-sourced and out-sourced IT audit staff resources. Appointed to the AutoNation Data Governance Working Group which acts as a delegated authority of the AutoNation Information Security Board for the security of sensitive information within AutoNation, and all information shared outside of AutoNation. Responsible for implementing and enforcing information security governance, policies, standards, and related procedures with respect to data classification, data handling, and third party service providers; reviewing recommendations and findings from third party risk assessments including OEMS; reviewing/approving all third party data access request escalations; reviewing/assessing internal applications, databases and communicate risk findings; and reviewing/mediating minor information security breaches at third parties. Appointed to the AutoNation Fraud Risk Working Group and reports to and takes direction from the Executive Risk Committee on identified and emerging fraud risks that impact strategic initiatives. This is accomplished by assisting in the establishment of standards of fraud risk measurement and assessment, facilitating management’s analysis of key fraud risks and updating assessments and anti-fraud plans on a periodic basis, enhancing cultural awareness of fraud risks through discussions with key process owners, and analyzing fraud incidents and corrective actions with management.

Education

• University of Florida

  BS/MS, Accounting/Accounting Information Systems

  1997 — 2002

Skills

• Analysis
• Information Security
• Cobit
• Quality Assurance
• Internal Audit
• Erp
• Risk Assessment
• Business Process
• Computer Security
• Information Technology
• Project Planning
• IT Audit
• Financial Reporting
• Accounting
• Process Improvement
• Auditing
• Access
• Information Security Management
• Strategy
• Management
• Security
• Sas70
• Business Process Improvement
• Enterprise Risk Management
• IT Strategy
• Governance
• Cisa
• Sarbanes-Oxley
• Sarbanes-Oxley Act
• Business Continuity
• Project Management
• Financial Risk
• Budgets
• Disaster Recovery
• Software Documentation
• Assurance
• Training
• Risk Management
• Internal Controls