Alejandro Rodriguez S.

Results-driven IT Risk & Audit Consultant with 4 years of experience leading IT General Controls (ITGC), automated application controls (ITAC), and cybersecurity compliance reviews across the financial sector. Proven track record evaluating IT governance (COBIT), managing regulatory requirements (SUGEF/CONASSIF), and supporting IT financial audit integrations. Fluent in English and Spanish.

Senior Information Technology Management Consultant at KPMG Costa Rica (2025-08 – Present)

• Independently lead and execute IT Audit engagements supporting integrated Financial Statement Audits, conducting end-to-end IT understanding, RAFIT, GITCs, ITACs, and automated Journal Entry (JE) testing.
• Direct the evaluation of IT governance frameworks (COBIT) and General IT Controls, identifying operational gaps and designing strategic remediation roadmaps for executive stakeholders.
• Supervise and mentor junior consultants, conducting deliverable quality assurance and presenting audit findings to senior management.

Business System Analyst at NTT DATA - Banco CMB (Costa Rica) S.A (2024-05 – 2025-08)

• Led the IT Risk & Control (R&C) function and coordinated the Manager Control Assessment (MCA) framework, ensuring alignment with regional standards and local regulatory requirements.
• Managed SUGEF regulatory compliance, coordinated ordinary/extraordinary IT Regulatory Committees, and tracked corrective actions.
• Conducted quarterly IT Risk Assessments, evaluated emerging technology risks, and served as key liaison for internal and external IT audits.
• Directed the annual Technological Profile assessment and managed the IT Records Management and procedural repository.

Management Consulting - IT Risk Advisory Staff Specialist at KPMG Costa Rica (2022-10 – 2024-05)

• Executed IT regulatory compliance audits (CONASSIF 5-17) and cybersecurity controls reviews for banks, financial entities, and stock exchanges.
• Evaluated General IT Controls (GITCs) and reviewed business process workflows utilizing COBIT 5 and COBIT 2019 standards.
• Managed deliverables, stakeholder communication, and project timelines across 25+ concurrent consulting and audit engagements.

Bachelor's degree in Information Technology Management – Tecnológico de Costa Rica (2017-02 – 2023-09)