beschikbaar?

TIP: soortgelijke CVs vinden

Manager

Work Experience

KPN (2003-2004)
For the Sarbanes-Oxley act we have selected the relevant financial accounts, processes and business units. Based on this selection I identified the Oracle support for primary financial processes. The Oracle environment contains the administration for approximately 20 operating units. For the 20 operating units I managed a team of three professionals to identify and document all the (automated) controls within the various modules. The report of the deficiencies and the control framework was communicated to the head of the Oracle business unit and to the various operating units’ project teams to complete their control framework.
Besides the Oracle business unit project I was involved in the identification and documentation of controls within the consolidation process.

Training (2004)
During one of the Deloitte tech weeks I was one of the two trainers who provided a two day course on “how to audit an Oracle financials environment” and how to translate the findings to the financial auditor. The training was attended by 14 Deloitte managers and Deloitte junior managers and a client of an UK governmental agency.

Book review (2003)
For Deloitte I reviewed the Oracle applications audit guide “how to audit an ERP system, Oracle”. The book is issued by the ISACA foundation. The review was performed in coordination with the authors of the audit guide. The audit guide is based on Oracle application 11i documented per business cycle.

CJIB (part of the ministry of Justice (2003))
For this project Deloitte was requested to set up compliance standards for internal projects. In the second phase of the project I audited the projects based on the quality standards defined and that were accepted by the organisation. I was part of a team of managers within this project and reported from the operations level to the head of the business units.

Ministry of Transport and Public works (2002)
For this project Deloitte was involved in the implementation of security and control for Oracle financials as part of the overall Oracle applications implementation. Within the project I was responsible for the implementation of the access rights per function defined by the organisation.

Readers Digest (2002 and 2003)
In 2002 I was responsible for the computer process integrity within the shared service centre procure to pay in the Netherlands. For the project I identified, documented and tested the controls within the application for the various countries that are supported by the shared service centre. This project was executed in cooperation with the internal audit team of Readers Digest. During this assignment I have managed a young professional from Deloitte. I reported to the senior auditor of Readers Digest.
In 2003 I performed an audit on the Sarbanes Oxley work performed by the Readers Digest shared service centre. The assignment contained a review of the testing that was performed by the employees of the shared service centre. In the second phase of the assignment we performed our own testing of the controls within the shared service centre. During this assignment I managed two Deloitte professionals . I reported to the coordinator of the SOX project, the European controller and the manager of the shared service centre.

Ministry of Defense (2002)
By using CRAMM I set up information security plans for several defence departments. On one of the departments I managed a team of two professionals. The information security plans were communicated to the commander of the department and the overall project leader. We identified the primary processes and modulated them in to CRAMM. By running workshops we identified the dependence of the process and by using questionnaires, the vulnerability of the processes. Based on the entered values, CRAMM calculated a SOLL position of measures. By making an inventory and through audits we identified the IST situation. The difference was processed in an implementation plan where we made a calculation of the costs and benefits of implementing the measure.

Read Elsevier (2001)
The aim of this project was to create an integrated audit plan for Oracle Financials for the internal audit department. My role within this project was to create the control framework using the control objectives to document the control activities and testing per business cycle.

SUN Microsystems (2001)
I participated in an implementation project for the EMEA part of the global company. The work consisted of a pre implementation audit on the design of Oracle applications (process controls defined within the application), security within Oracle applications (access rights), conversion process (integrity of data), interface and customisations process. For this project I was part of a project team of two Deloitte people. We reported to the overall project leader and to the head of the Dutch office.

Education

Bachelor of business Administration;

Final year Vrije Universiteit of Amsterdam, EDP audit;

Certified Oracle Financials, modules GL, PO, AP, AR, CM, FA, Projects billing, Projects costing and ICM.

Skills

Focus on operational and IT risk management for large national and multinational companies;

Focus on corporate governance (process management and design of internal control);

Focus on ERP security and control;

Focus on information security;

Focus on IT audit.

Languages

Dutch: Native
English: Interviewing, Reading and writing
German: Interviewing, Reading and writing

 beschikbaar?