Corporate Internal Audit Consultant | Continuous Auditing | Technology Risk
Pennsylvania, USA | LinkedIn | Contact me
Professional Summary
CISA-certified internal audit professional with extensive insurance industry experience leading complex risk-based technology audits and designing continuous audit testing. Expertise in IT general controls (ITGCs), cybersecurity, cloud infrastructure, operational resilience, third-party risk, and emerging technology. Currently automating interim and year-end ITGC testing to improve audit efficiency, consistency, and coverage. Experienced in audit planning, workpaper review, auditor development, external auditor coordination, and executive reporting. Leverages analytics, automation, and AI to modernize assurance practices.
Core Competencies
- IT Internal Audit
- Continuous Audit Design
- Interim & Year-End ITGC Testing
- ITGCs & Application Controls
- Integrated Audit Support
- Cybersecurity & Cloud Risk
- Control Design & Operating Effectiveness
- Risk-Based Audit Planning
- Workpaper Review
- External Auditor Coordination
- Audit Team Development
- Audit Analytics & Automation
- AI Governance
- Operational Resilience
- Remediation Validation
Selected Accomplishments
- Presented Internal Audit’s use of AI to the Audit Committee, addressing responsible adoption and opportunities to strengthen assurance.
- Advanced dynamic risk sensing through analysis of internal and external risk signals to inform audit risk assessment.
- Earned CISA (2024), ISO/IEC 27001:2022 Lead Auditor (2025), and Six Sigma Black Belt (2025) certifications while leading technology audits.
Professional Experience
Erie Insurance | Jul 2018–Present
Corporate Internal Audit Consultant (Apr 2026–Present)
- Lead complex technology audit and advisory engagements across planning, risk assessment, control testing, reporting, and remediation follow-up.
- Designed continuous audit testing approaches and lead automation of interim and year-end ITGC testing, targeting a 30% reduction in testing effort.
- Review workpapers, assess engagement performance, and support professional development of auditors; contribute to annual audit planning and enterprise risk assessment.
- Coordinate with external auditors and business stakeholders to support assurance and control evaluation activities.
- Developed automated department and board-level reporting that reduced administrative effort by 22%; apply analytics and risk signals to improve audit insights.
- Serve as an internal subject matter resource on AI governance and responsible audit automation.
Senior IT Internal Auditor (Sep 2024–Apr 2026)
- Led end-to-end technology audits covering cybersecurity, identity and access management, cloud environments, third-party risk, technology operations, and business controls.
- Evaluated design and operating effectiveness of ITGCs, application controls, access, change management, security monitoring, and remediation activities.
- Assessed Azure environments, backup and recovery, business continuity/disaster recovery, incident response, vulnerability management, and resilience controls.
- Reviewed SOC reports and exceptions as audit evidence; applied SQL and analytics to strengthen testing coverage and communicate findings to senior leaders.
IT Internal Auditor II (Oct 2022–Sep 2024)
- Led and supported risk-based IT and business-process audits, including control testing, audit documentation, reporting, and remediation follow-up.
- Evaluated third-party risk, privacy, data security, access controls, and development/change processes involving GitLab and DevSecOps.
- Mentored peers and supported improvements to audit tools, methodologies, and analytical practices.
IT Analyst (Data) (Jul 2018–Oct 2022)
- Engineered database structures supporting AWS Aurora deployments and enterprise data environments.
- Built dashboards and automated operational reporting to strengthen monitoring, data quality, and management decisions.
Provider Resources | Jul 2017–Jul 2018
Chief of Staff / QA Manager
- Led strategic planning sessions, ISO/CMMI audit activities, risk assessments, compliance initiatives, quality management, and process improvement.
Earlier Quality, Data & Engineering Roles | 1999–2017
Microbac Laboratories, Heatron, Spectrum Control, AVX Corporation: progressive quality, analytical, engineering, and people-leadership responsibilities.
Frameworks, Technology & Tools
Audit & Governance: IIA Global Internal Audit Standards, COBIT, COSO, ISO 27001, NIST CSF, NIST 800-53, NIST AI RMF, SOC report review, ITGCs, continuous auditing
Security & Technology: Azure, AWS Aurora, IAM, vulnerability management, BCDR, backup/recovery, incident response, third-party risk, GitLab, DevSecOps
Analytics & Platforms: SQL, Power BI, Splunk, Qlik, SAS, ServiceNow, TeamMate+, automated reporting, AI-assisted audit workflows
Certifications & Education
Certifications: CISA (2024) | ISO/IEC 27001:2022 Lead Auditor (2025) | Certified Six Sigma Black Belt (2025) | ASQ Certified Quality Auditor (2016) | Six Sigma Green Belt (2017)
Education: University of Cincinnati: MBA (in progress); Graduate Certificate, Artificial Intelligence for Business | Clemson University: B.S., Ceramic Engineering