Ivan Ortiz

Mas de 5 años liderando auditorías evaluando la efectividad de los controles implementados para la mitigación de riesgos de TI mediante la realización de pruebas y recomendaciones viables de acuerdo con las prácticas líderes.

I’m a Computer Systems Engineer with more than 5 years of experience in Systems Auditing. In my previous position I gained experience in the financial sector performing audits like compliance, IT risk, operational and integrated audits. My responsibilities included basically leading the work team, assigning tasks, coordinating meetings, documenting and writing the report of findings with corrective actions by the responsible.

As secondary functions, I helped the IT areas to validate the compliance of the systems in accordance with the requirements requested by regulatory entities.

Likewise, I used to work together with the IT security and Internal Control areas for the implementation of controls in the acquisition of new technologies as well as the updating of IT policies and procedures.

Another secondary function which I was responsible for, was to perform root cause reports of incidents in the applications, participation in disaster recovery plan and firewall exercises.

In my current position as senior technology risk auditor my main function included basically plan and lead the work plan of risk-based audits and SOX audits in accordance with the firm's methodology which is based on leading practices like CISA and Cobit. which includes supervision of the work team, preparation and review of documentation such as walkthroughs, integrity of the information provided by the entity (IPE), sampling, tests and results including the audit letter with the results and recommendations of our review, maintain good communication with the client to follow up our requirements, schedule sessions and discuss possible deviations.

Ingeniero en Sistemas Computacionales | Tecnológico De Estudios Superiores De Ecatepec

CISA | ISACA

SC-900: Microsoft Security | Microsoft