Christopher Saracco

About Christopher Saracco

I am a seasoned professional with years of experience leading Sarbanes-Oxley (SOX) consulting and compliance engagements, information technology (IT) and information security internal audits, System and Organization Controls (SOC) attestations, and other various risk-related advisory projects for a wide array of publicly traded companies and privately owned businesses with international operations. I have also supported both membership organizations and not-for-profit (NFP) organizations. My industry experience includes but is not limited to manufacturing, distribution, retail, technology, life sciences, asset management, and other financial services or financial institutions.I provide value by mixing deep technical capabilities with strong interpersonal skills in order to help organizations understand the risks they are facing, assess their internal controls and processes, and determine what, if any, steps need to be taken in order to improving their risk management profiles. I believe direct, open lines of communication are critical to bypass bottlenecks and bring actionable change for my clients. I am dedicated to delivering high-quality outcomes that exceed expectations and drive business success.

Experience

1. Partner

   Grant Thornton (US)

   Aug 2023 — Present · Chicago, IL, US

   Plan, manage, execute, and deliver IT SOX services in support of financial statement audits for numerous national and multi-national organizations• Help organizations manage their SOX compliance and organize their roadmap for addressing control issues and gaps through a number of unique events (e.g, going public through an IPO or SPAC, acquiring new companies who were previously not public, implementing complex ERP and other financial reporting systems, etc.)• Facilitate IT risk assessment sessions and help organizations identify key IT risks and develop multi-year audit plans that can be utilized to measure the effectiveness of controls• Plan, design, manage, and deliver internal audit services to organizations within a number of different industries over various IT-related topics (e.g, third-party risk management, performance and capacity management and monitoring, disaster recovery and business continuity plans and procedures, etc.)• Evaluate and report on IT controls for System and Organization Controls reports (SOC 1, SOC 2, and SOC 3), as well as other AICPA examinations and reviews

Education

• University of Notre Dame

  BA, Information Technology Management

  2005 — 2009

Skills

• Cobit
• Sarbanes-Oxley
• Generally Accepted Accounting Principles (Gaap)
• Accounting
• Financial Reporting
• Management Consulting
• Financial Analysis
• Information Technology
• Ssae16
• Management
• Gaap
• Cisa
• Internal Audit
• Enterprise Risk Management
• Sarbanes-Oxley Act
• Business Process Improvement
• IT Audit
• Auditing
• External Audit
• Sas70
• Internal Controls