
Management Consultant & Advisor - IT, Audit, & Controls at SENGA Technology LLC
Greater Philadelphia Area

Management Consultant & Advisor - IT, Audit, & Controls at SENGA Technology LLC
Greater Philadelphia Area
Over 15 years experience in internal audit, project management, and consulting within various industries, including telecommunications, financial services, and manufacturing.
Areas of expertise include assessments of information technology, internal controls, business processes, regulatory compliance including: Sarbanes-Oxley, IT general and application controls, systems development, change management, and disaster recovery, and project and risk management.
Serve on the board of directors for the Philadelphia Information Systems Audit & Control Association (ISACA), after serving as president of the organization from 1997 - 2000.
Provide management advisory services to senior executives in middle market and Fortune 500 companies to assist in aligning financial, business, and compliance objectives with IT strategy and focus.
Specialize in high tech auditing with expertise assessing IT operations as well as complex networks, operating systems, databases, and business applications.
aperaino@sengatech.com or 609-313-2149
Certified Information Systems Auditor (CISA)
Certified in the Governance of Enterprise IT™ (CGEIT™)
Information Technology, IT audit and controls, management consulting, business process evaluations, internal audit, SAS #70 assessments, disaster recovery, business continuity, change management, information security, computer operations, e-business, Sarbanes-Oxley compliance, CISA, certified information systems auditor.
(Privately Held; 1-10 employees; Management Consulting industry)
December 2005 — Present (2 years 10 months)
Management advisory and staff resourcing for small and medium sized companies. Providing expertise and advisory services to CIOs and IT management to implement best practices and improve organizational performance and meeting compliance goals. aperaino@sengatech.com 609-313-2149
(Non-Profit; 11-50 employees; Non-Profit Organization Management industry)
May 1996 — Present (12 years 5 months)
• President - Philadelphia Chapter of the Information Systems Audit & Control Association (ISACA), 1997-2000 & 2005-2007. Chapter President responsible for managing 19 directors and the Chapter's affairs. Also, functioned as a seminar coordinator, web site developer, newsletter writer, employment recruiter, social director, college liaison, and program speaker.
• Board of Directors, Information Systems Audit & Control Association - Philadelphia Chapter, 1995 - present.
(Privately Held; 11-50 employees; Management Consulting industry)
January 2005 — December 2005 (1 year)
Provided compliance, enterprise risk management, financial process and IT system improvements, internal audit, tax, and financial outsourcing services to Fortune 500 companies in diverse industries.
(Public Company; 11-50 employees; Staffing and Recruiting industry)
January 2005 — December 2005 (1 year)
Provided interim professional resources for temporary contract or permanent assignments and projects.
(Privately Held; 51-200 employees; Management Consulting industry)
March 2004 — January 2005 (11 months)
Provided financial and IT management advisory services to Fortune 1000 companies in various industries. Responsibilities included: Sarbanes-Oxley consulting, documentation, compliance testing and reporting, SAS 70 assessments, business process analysis, documentation, and re-engineering, technology requirements, legacy system support, and internal auditing.
Led the firm's IT audit practice managing a staff of 40 IT consultants.
Directed audit teams in support of client initiatives interacting with CFO / CIO and senior management teams to establish and manage project scope and timelines, educated management on regulatory requirements and best practices, and facilitated the implementation of process improvements.
Defined IT business plans and managed IT budgets for the firm.
Developed business processes and procedures for audit and consulting engagements using COBIT/COSO standards as a framework for evaluating controls for IT governance/best practices.
(Public Company; 10,001 or more employees; VZ; Telecommunications industry)
October 1994 — November 2003 (9 years 2 months)
Planned and managed concurrent, cross-functional audit teams both locally and internationally for the corporate organization and its subsidiaries, including: business processes, regulatory compliance, network and application systems, general controls, contingency planning, systems development, and IT consulting for major corporate initiatives.
Managed major audits in areas such as IT network security, system security, change management, disaster recovery, cash management, billing, service order processing, and human resources
Consistently achieving desired business results by taking personal accountability, effectively organizing and planning work, setting priorities and executing ambitious action plans.
Award of Recognition provided for outstanding customer focus, teamwork, leadership, and innovation exhibited during two billing system projects.
(Public Company; 5001-10,000 employees; Financial Services industry)
March 1993 — December 1994 (1 year 10 months)
Led technical system and integrated financial/operational audits including: general ledger application system and financial/operational audit; credit card processing system; leasing RS6000 system and security controls; UNIX security, retail banking systems audit; credit card and deposit confirmation audit; Mortgage system review; and a VAX security audit.
Participated on a project team with senior management to analyze and select a replacement for their mortgage origination system.
Performed data extraction support for financial audits and assisted the FDIC and external auditors in completing company assessments.
(Public Company; 1001-5000 employees; mtor; Banking industry)
September 1989 — December 1992 (3 years 4 months)
Performed technical system audits of mainframe, networks, and banking applications such as the Money Access Center (MAC). Completed general control audits such as disaster recovery and change management. Performed audits of external vendors such as Electronic Data Systems and the Pennsylvania Student Lending Association.
Participated on a fraud task force to assist management in the investigation, identification, and recovery of funds associated with internal fraud activities.
Assisted in the design, installation, and configuration of a departmental local area network (LAN). Established and implemented departmental network administration and user policies and procedures. Administered LAN system security and administration function, provided PC user support, and performed trouble shooting activities.
CGEIT, Certified in the Governance of Enterprise IT™ (CGEIT™), 2008 — 2008
CISA, Information Systems Audit, 1989 — 2008
B.B.A, Accounting, Economics Minor, 1986 — 1989
http://www.jmu.edu/
Management training, new technology, investing, financial planning, energy conservation, solar power
• Past-President - Information Systems Audit & Control Association (ISACA), 1997-2000 & 2005-2007. http://www.phillyisaca.org/
• Board of Directors, Information Systems Audit & Control Association - Philadelphia Chapter, 1995 - present.
• Member, Institute of Internal Auditors, 1989 - 2000. http://www.theiia.org/
• Member, National Association of Women Business Owners (NAWBO), 2006-Present. http://www.nawbo.org/section_2.cfm