Alex T.

Experience

1. Director Advisory Services

   KPMG US

   Sep 2011 — Present · Cincinnati, KY

   Integrated Audit— Assess clients’ automated business process and IT general controls and application controls and provides client management with results of the assessment, including identified risks and recommendations— Conduct real-time system assessments in order to identify sources of risk and provide practical alternatives to mitigate and remediate risks for both purchased and in-house developed applications— Served as the director for multiple location integrated audits focused on general Information Technology processes and controls, including data center operations, information security, systems development life cycle and program change controls in support of SOX complianceIT Audit Services— Support the IT Internal Audit function of companies in various industries. Executed test procedures supporting management’s efforts to report on Internal Controls over Financial Reporting (ICOFR) for both general IT and automated process controls. Also coordinate with external auditor to increase reliance of Internal Audit’s work to reduce time commitment required from Business and IT control owners— Assessed resilience capabilities for various organizations including review of Business Impact Analysis results, formalizing test recovery plans, facilitated table top exercises and understanding system dependencies mapping SSAE18 Reporting— Serve as the engagement Director responsible for engagement planning, budgeting, execution, and delivery for multiple SOC1 reports. Issued reports include various areas such as policy requirements, physical and network security, environmental monitoring, and data/transaction processing, IT managed services, and data center hosting— Coordinate and lead meetings with client resources (including IT, business process owners, and executive management) to assess controls and provide project status and results for SOC2 Readiness assessments over various Trust Service Principles, including Security, Availability, and Confidentiality