Sergiu MacOvei

About Sergiu MacOvei

At IBM, my role as a Third Party Security and Privacy Audit Leader is defined by a relentless pursuit of excellence in risk management and a drive to elevate the security standards of our partners. With a skill set honed over years in the industry, my expertise lies in spearheading security audits aligned with rigorous frameworks such as ISO 27001 and NIST, utilizing Agile methodologies to enhance process efficiency and effectiveness. The foundation of my professional ethos is a commitment to continuous improvement and innovation. My approach is collaborative, guiding teams with the insights gained from my extensive credentials in information systems and fraud examination, to fortify our defense lines and safeguard our operations.

Experience

1. Ww Internal Audit

   Red Hat

   Jun 2016 — Present · Raleigh-Durham, NC, US

   Advised the first and second lines of defense regarding IT controls – using NIST CSF, NIST 800-53, COBIT and ISO27k1 frameworks.• Developed advanced automatic testing procedures for financial controls that saved time and effort for the team and increased the accuracy and coverage of the testing.• Lead IT technical audits and on-spot reviews.• Lead IT related SOX testing and acting as interface between external auditors, Red Hat IT, Finance and Business Controls. • Acted as interface between Red Hat and external auditors for SOC2 certification engagements• Performed complex data extractions for audit reviews.• Participated in the preparation of Audit Committee quarterly presentation and the Agile transformation project.

Education

• ISACA

  CISA, Information Systems Audit

  2006 — 2006

• ACFE

  CFE, Fraud Examination

  2009 — 2013

• Institute of Internal Auditors

  CIA, Internal Audit

  2006 — 2008

• Academy of Economic Studies Bucharest

  Bachelor of Science (BSc), Accounting and Managerial IT Systems

  2000 — 2004

Skills

• Auditing
• Financial Audits
• Internal Controls
• Analysis
• Cobit
• External Audit
• Ifrs
• Process Improvement
• Data Mining
• Management
• Operations Audit
• Risk Management
• Business Process Improvement
• Project Management
• Fraud Detection
• Assurance
• Investments
• Cisa
• Fraud Investigations
• Managerial Finance
• Corporate Fraud Investigations
• Positive Personality
• Internal Audit
• Egrc
• Management Consulting
• Analytical Skills
• Enterprise Risk Management
• Financial Risk
• Certified Fraud Examiner
• Data Analysis
• IT Audit
• Business Analysis
• Financial Analysis
• Accounting
• Programming
• Us Gaap
• Financial Reporting
• Risk Assessment
• Sarbanes-Oxley Act