Bounce Back in IT: Bounce Back in IT: Focus on IT AuditFocus on IT Audit

April 13th, 2010April 13th, 2010

Sheila BurkettSheila Burkett

Tuxedo Park Management, Tuxedo Park Management, LLCLLC

04/12/2304/12/23 22Sheila Burkett, Tuxedo Park Management, LLC

AgendaAgenda

IntroductionsIntroductions IT Audit Positions & PanelIT Audit Positions & Panel Breakout GroupsBreakout Groups Wrap-upWrap-up

04/12/2304/12/23 33Sheila Burkett, Tuxedo Park Management, LLC

What Is An IT AuditorWhat Is An IT Auditor

Verify the effectiveness of the Verify the effectiveness of the organizations’ internal controlsorganizations’ internal controls

Check for mismanagement, waste, or Check for mismanagement, waste, or fraudfraud

Financial and Information Systems, Financial and Information Systems, Management ProceduresManagement Procedures

Ensure records are accurate and Ensure records are accurate and controls are adequatecontrols are adequate

Reliability and integrity of dataReliability and integrity of data

04/12/2304/12/23 44Sheila Burkett, Tuxedo Park Management, LLC

Where is Job GrowthWhere is Job Growth 10.6% growth in management, business 10.6% growth in management, business

and financialand financial 16.8% growth in professional and related 16.8% growth in professional and related

occupationsoccupations 13.8% growth in services occupations13.8% growth in services occupations

Much faster than average employment Much faster than average employment growth will result from an increase in the growth will result from an increase in the number of businesses, changing financial number of businesses, changing financial laws and regulations, and greater scrutiny laws and regulations, and greater scrutiny

of company finances. of company finances.

Bureau of Labor Statistics

04/12/2304/12/23 55Sheila Burkett, Tuxedo Park Management, LLC

Where is Job GrowthWhere is Job Growth

21.7% growth for Accountants and 21.7% growth for Accountants and AuditorsAuditors

23% growth for Management Analysts23% growth for Management Analysts 53% growth for Network and Systems 53% growth for Network and Systems

AnalystsAnalysts

As MORE business functions are As MORE business functions are automated, more audit functions center automated, more audit functions center

on IT.on IT.Bureau of Labor Statistics

04/12/2304/12/23 66Sheila Burkett, Tuxedo Park Management, LLC

Where is Job GrowthWhere is Job Growth

Occupational Profile: Accountants and Occupational Profile: Accountants and AuditorsAuditors

Occupation TrendsOccupation Trends– 13% job growth in MO between 2006-13% job growth in MO between 2006-

20162016– Currently 820 job openings in MOCurrently 820 job openings in MO

Also Occupational Profile:Also Occupational Profile:– Computer Systems AnalystsComputer Systems Analysts– Network & Systems AnalystsNetwork & Systems Analysts– Management AnalystsManagement Analysts CareerOneStop.org

04/12/2304/12/23 77Sheila Burkett, Tuxedo Park Management, LLC

Missouri Job DataMissouri Job Data

0

5,000

10,000

15,000

20,000

25,000

30,000

35,000

Total Jobs 2016 Projection

Computer SystemsAnalystNetwork Sys. & DataComm AnalystsManagement Analysts

Accountants & Auditors

Data from careeronestop.org

04/12/2304/12/23 88Sheila Burkett, Tuxedo Park Management, LLC

Missouri Job DataMissouri Job Data

0

500

1000

1500

2000

2500

3000

3500

Openings Growth

Computer SystemsAnalystNetwork Sys. & DataComm AnalystsManagement Analysts

Accountants & Auditors

Data from careeronestop.org

04/12/2304/12/23 99Sheila Burkett, Tuxedo Park Management, LLC

Why Is This Growing and Why Is This Growing and Important?Important?

RegulationRegulation– HIPPA (Health Insurance Portability and HIPPA (Health Insurance Portability and

Accountability Act of 1996)Accountability Act of 1996)– Gramm-Leach-Bliley Act 1999Gramm-Leach-Bliley Act 1999– Sarbanes-Oxley Act 2002Sarbanes-Oxley Act 2002– FDAFDA

Growth in BusinessesGrowth in Businesses Growth in AutomationGrowth in Automation

04/12/2304/12/23 1010Sheila Burkett, Tuxedo Park Management, LLC

KSA AnalysisKSA Analysis

Knowledge, Skills and AbilitiesKnowledge, Skills and Abilities Network & System Analysts (NA)Network & System Analysts (NA) Management Analysts (MA)Management Analysts (MA) Computer Systems Analysts (CSA)Computer Systems Analysts (CSA) Auditors (A)Auditors (A)

04/12/2304/12/23 1111Sheila Burkett, Tuxedo Park Management, LLC

Knowledge for AuditorKnowledge for AuditorNANA CSCS

AAMAMA AA

EnglishEnglish XX XX XX XX

Computers & ElectronicsComputers & Electronics XX XX XX XX

Customer & Personal ServiceCustomer & Personal Service XX XX XX

Engineering & TechnologyEngineering & Technology XX XX

Administration & MgmtAdministration & Mgmt XX XX

MathematicsMathematics XX XX

Personnel & HRPersonnel & HR XX

Economics & AccountingEconomics & Accounting XX

TelecommunicationsTelecommunications XXData from careeronestop.org

04/12/2304/12/23 1212Sheila Burkett, Tuxedo Park Management, LLC

Skills for AuditorSkills for AuditorNANA CSACSA MAMA AA

Critical ThinkingCritical Thinking XX XX XX

Complex Problem SolvingComplex Problem Solving XX XX XX

Active ListeningActive Listening XX XX XX XX

Active LearningActive Learning XX XX XX

Reading ComprehensionReading Comprehension XX XX

Judgment & Decision Judgment & Decision MakingMaking

XX XX

Coordination & Time Coordination & Time ManagementManagement

XX

Speaking & WritingSpeaking & Writing XX

Equipment Selection & Equipment Selection & TroubleshootingTroubleshooting

XX

Data from careeronestop.org

04/12/2304/12/23 1313Sheila Burkett, Tuxedo Park Management, LLC

Abilities for AuditorAbilities for AuditorNANA CSACSA MAMA AA

Deductive ReasoningDeductive Reasoning XX XX XX

Oral ComprehensionOral Comprehension XX XX XX XX

Inductive ReasoningInductive Reasoning XX XX XX

Written ComprehensionWritten Comprehension XX XX XX

Problem SensitivityProblem Sensitivity XX XX XX

Oral ExpressionOral Expression XX XX XX

Information OrderingInformation Ordering XX XX

Written ExpressionWritten Expression XX

Speech ClaritySpeech Clarity XX XX

Category Flexibility, Fluency of Category Flexibility, Fluency of Ideas & Near VisionIdeas & Near Vision

XX

Data from careeronestop.org

04/12/2304/12/23 1414Sheila Burkett, Tuxedo Park Management, LLC

Job TitlesJob Titles

Information Technology AuditorsInformation Technology Auditors Internal Control AnalystInternal Control Analyst Environmental AuditorsEnvironmental Auditors Compliance AuditorsCompliance Auditors

04/12/2304/12/23 1515Sheila Burkett, Tuxedo Park Management, LLC

Our PanelOur Panel

Crystal DeesCrystal Dees– PMO Project Leader responsible for PMO Project Leader responsible for IS

General Controls Oversight at Edward Jones

Randy HirschRandy Hirsch– Associate in Information Technology Associate in Information Technology

Advisory Services at KPMGAdvisory Services at KPMG Ron SchmittlingRon Schmittling

– Practice Leader: Security & Privacy at Practice Leader: Security & Privacy at Brown Smith WallaceBrown Smith Wallace

04/12/2304/12/23 1616Sheila Burkett, Tuxedo Park Management, LLC

Panel QuestionPanel Question1. What is your background? How did

you get into an IT Auditor position?2. What certifications and education

did you need to get into this type of position?

3. What is your typical day as an IT Auditor (or your role in this area)?

4. Why do you think this is a growth job area? What do you see happening in the future?

04/12/2304/12/23 1717Sheila Burkett, Tuxedo Park Management, LLC

Breakout GroupsBreakout Groups

Internal Audit Discussion with PanelInternal Audit Discussion with Panel 1-on-1 Resume Review with Missouri 1-on-1 Resume Review with Missouri

Career CenterCareer Center Improving your LinkedIn profile with Improving your LinkedIn profile with

David StromDavid Strom First Time Attendees with Sheila First Time Attendees with Sheila

BurkettBurkett

04/12/2304/12/23 1818Sheila Burkett, Tuxedo Park Management, LLC

Wrap UpWrap Up

THANK YOU to our panel and THANK YOU to our panel and breakout session leaders!breakout session leaders!

Upcoming SessionsUpcoming Sessions

04/12/2304/12/23 1919Sheila Burkett, Tuxedo Park Management, LLC

ResourcesResources

Bounce Back St. Louis: Bounce Back St. Louis: Bouncebackstl.orgBouncebackstl.org

MERIC (MO Economic Research and MERIC (MO Economic Research and Information Center): Information Center): Missourieconomy.orgMissourieconomy.org

Bureau of Labor Statistics: Bls.orgBureau of Labor Statistics: Bls.org Careeronestop.orgCareeronestop.org

04/12/2304/12/23 2020Sheila Burkett, Tuxedo Park Management, LLC

Crystal Dees, CISACrystal Dees, CISAAs a Certified Information Systems Auditor (CISA), Crystal Dees As a Certified Information Systems Auditor (CISA), Crystal Dees has over 15 years experience in IT Audit, Governance, and has over 15 years experience in IT Audit, Governance, and Process Improvement. In 2007, Crystal assumed responsibility in Process Improvement. In 2007, Crystal assumed responsibility in Edward Jones' Program Management Office as a Project Leader Edward Jones' Program Management Office as a Project Leader responsibly for IS General Controls Oversight and assists in the responsibly for IS General Controls Oversight and assists in the development and improvement of key processes, controls, and development and improvement of key processes, controls, and risk mitigation.  Other experiences within Edward Jones included risk mitigation.  Other experiences within Edward Jones included a Sr. Analyst in Information Systems'  Systems Operations a Sr. Analyst in Information Systems'  Systems Operations Center and a Sr. IS Auditor in the Internal Audit Division.Center and a Sr. IS Auditor in the Internal Audit Division.  Prior to joining Edward Jones, Crystal was employed by May Prior to joining Edward Jones, Crystal was employed by May Department Stores and Magna Group as a Senior Information Department Stores and Magna Group as a Senior Information Systems Auditor.  She graduated from Southern Illinois Systems Auditor.  She graduated from Southern Illinois University at Edwardsville with a bachelor's degree in Business University at Edwardsville with a bachelor's degree in Business Administration – Management Information Systems.  She is a Administration – Management Information Systems.  She is a member of Information Systems Audit and Control Association member of Information Systems Audit and Control Association (ISACA), Institute of Internal Auditors (IIA), and Information (ISACA), Institute of Internal Auditors (IIA), and Information Systems Security Association (ISSA). Crystal is also ITIL v2 - Systems Security Association (ISSA). Crystal is also ITIL v2 - Foundation certified.Foundation certified.

04/12/2304/12/23 2121Sheila Burkett, Tuxedo Park Management, LLC

Randy HirschRandy HirschRandy Hirsch is a Missourian native.  He was born in Monett, MO and his Randy Hirsch is a Missourian native.  He was born in Monett, MO and his family moved to the St. Louis area within a couple years after his birth.  family moved to the St. Louis area within a couple years after his birth.  Randy attended Fort Zummalt High School and after graduating joined the US Randy attended Fort Zummalt High School and after graduating joined the US Air Force.  He retired from the Air Force after serving 22 years.  While in the Air Force.  He retired from the Air Force after serving 22 years.  While in the Air Force, Randy was introduced to Information Technology.  His last 8 years, Air Force, Randy was introduced to Information Technology.  His last 8 years, he served the Commander of the United States Air Forces in Europe and the he served the Commander of the United States Air Forces in Europe and the Air Mobility Command as the Non-Commissioned Officer in Charge of  Air Mobility Command as the Non-Commissioned Officer in Charge of  Command Presentations. Command Presentations. 

In 2000, while in the Air Force, Randy earned his Associates in Information In 2000, while in the Air Force, Randy earned his Associates in Information Systems.  He entered the work force at Charter Communications in the Systems.  He entered the work force at Charter Communications in the regional IT office as a PC technician and later worked at Charter’s internal IT regional IT office as a PC technician and later worked at Charter’s internal IT Help Desk. Help Desk. 

Randy continued his education and earned his Bachelor of Science degree in Randy continued his education and earned his Bachelor of Science degree in Network Engineering and Computer Technology from Vatterott College in Network Engineering and Computer Technology from Vatterott College in 2005.   2005.   

In 2006, Randy began his career at KPMG as an Associate in Information In 2006, Randy began his career at KPMG as an Associate in Information Technology Advisory Services where he continues to work today. Technology Advisory Services where he continues to work today. 

04/12/2304/12/23 2222Sheila Burkett, Tuxedo Park Management, LLC

Ron SchmittlingRon Schmittling Practice Leader at Brown Smith and WallacePractice Leader at Brown Smith and Wallace IT executive and leader with broad experience in IT executive and leader with broad experience in

many aspects of technology, information security, many aspects of technology, information security, risk management, and compliance management. risk management, and compliance management. Direct experience with application development, Direct experience with application development, project management, SOX, SAS70, management project management, SOX, SAS70, management consulting, information security, computer consulting, information security, computer forensics, PCI DSS, TG3, etc. Interested in adding forensics, PCI DSS, TG3, etc. Interested in adding value through risk management to companies of value through risk management to companies of all sizes and industries. all sizes and industries.

University of IL at Urbana-ChampaignUniversity of IL at Urbana-Champaign MBA - SIUEMBA - SIUE