Mark Alabanza

WORK HISTORY

EDUCATION

SKILLS

ABOUT MARK ALABANZA

In exercising due professional care internal auditors must consider the use of technology-based audit and other data analysis techniques\"(The IIA Standards 1220.A2).I know what I know now because I used 10 CLS with 20 GOTO 10. This was when I was 10 years old. Now, I am exponentially smarter than I was back then.Who I am, professionally:* An IT Internal Auditor providing value-adding, independent, objective assurance and advisory services* A Certified Information Systems Auditor with a Bachelor of Science in Accountancy and an MBA education* Blended knowledge and experience in Risk and Audit, Finance and Accounting, and Business Management* 10 years experience in auditing infosec and cybersecurity, C-SOX IT Controls, and IT Operations* Applies knowledge in audit principles, practices, and standards which include COBIT 2019 of ISACA, NIST Cybersecurity Framework and Special Publications, ISO 27001/2, COSO, and IPPF of the IIA* Reports on IT audit findings that are understandable for C-suite executives and workable for IT specialists* Documentation in working papers are consistently relied on and used by external auditors* Collaborates with IT and Business when creating solutions to IT Internal Audit findings and observations* Skilled in hands-on audit testing of SAP through SE16N tables, SUIM reports, and other Transaction Codes* Skilled in hands-on audit testing using Windows Operating System PowerShell and Linux Bash scripts* Skilled in hands-on Machine Learning (Artificial Intelligence subset) program scripting and coding* Skilled in hands-on Robotic Process Automation (RPA) program scripting and dynamic expressions* Skilled in hands-on Python program scripting and coding for big data analytics and data visualizations* Skilled in hands-on development of auditable Microsoft Enterprise Software content using Microsoft Power Platform (Power Apps, Power Automate, Power BI) and Microsoft 365 including SharePoint administration * Experienced in developing a governance framework for an IT Steering Committee* Experienced in developing procedural documents and controls narratives for IT OperationsFeel free to ask me on how to go about certain types of IT audits.