Eric Kelly
Summary
Dynamic technology audit leader with extensive experience, specializing in risk-based auditing and identity access management. Proven track record in enhancing audit processes through automation, fostering collaborative relationships, and driving significant improvements in control effectiveness. Adept in Excel and committed to excellence in audit execution and stakeholder communication.
Overview
1
1
Certification
15
15
years of professional experience
Work History
VP, Technology Audit Manager
JPMorgan Chase
Jersey City, New Jersey
06.2024 - Current
- Supported collaboration among department heads to drive cross-functional project execution.
- Developed and executed annual audit plans, managed audit engagements, performed audit testing, and participated in applicable control and governance forums.
- Managed audit engagements from planning through reporting.
- Partnered with colleagues and stakeholders to evaluate, test, and report on design and operating effectiveness of management controls.
- Communicated audit findings to management and identified opportunities for improvement.
- Built collaborative working relationships with stakeholders while providing independent challenge.
- Contributed to collaborative team environment with peers, supporting culture that encourages integrity, respect, excellence, and innovation.
- Identified opportunities to improve audit processes through automation.
- Built collaborative relationships with stakeholders, provided independent challenge, contributed to team culture, and stayed current on industry and regulatory changes.
- Led cross-functional initiatives across JPMorgan Chase business and technology teams.
- Managed stakeholder communication with senior leaders and client partners.
- Supported audit efficiency through automation while contributing to process improvement.
- Communicated audit findings to management and identified opportunities for improvement.
- Built collaborative working relationships with stakeholders while providing independent challenge.
- Contributed to collaborative working environment with team members and peers, supporting culture that encourages integrity, respect, excellence, and innovation.
- Stayed current on evolving industry and regulatory developments.
- Identified opportunities to improve audit processes through automation.
- Coordinated cross-functional communication to align subject matter expectations.
- Provided one-on-one support for team members and managers to drive continuous improvement.
- Provided subject matter expertise during meetings with senior leadership team members to discuss potential opportunities or challenges.
- Created technical documentation including system diagrams, process flow charts, and white papers.
- Advised LOB and regional audit teams on identity and access management subject matter standards and operational procedures.
Cyber Risk, Manager
Grant Thornton
New York, NY
04.2021 - 03.2022
- Oversaw multiple risk-based cyber and privacy audits, by defining scope, communicating with stakeholders, documenting assessments, testing, and raising findings to senior management.
- Led cybersecurity assessments for clients using the NIST CSF, CSA Cloud Control Matrix (CCM), and CIS frameworks to determine program maturity, identify gaps between the current and desired states of the program, and outline improvement opportunities through recommendation roadmaps.
- Led the evaluation of the design and effectiveness over key cyber processes including BC/DR, Incident Management, Vulnerability and Patch Management for various clients.
- Performed engagement management responsibilities, including task delegation, project scheduling, project economics and financials, quality review, and client management.
- Facilitated cross team communication between senior management, engagement planning teams, and resources to streamline the staffing process.
- Managed, developed, and trained on-shore and off-shore resources to execute planned fieldwork.
- Developed and leveraged relationships with various subject matter experts to pursue and manage business development opportunities.
Assistant Vice President - Supervisor, Global Technology & Operations
Bank of America
New York, NY
08.2017 - 03.2021
- Led readiness assessment efforts to support the implementation of regulatory-driven programs through collaboration with business and technology stakeholders to identify key risks and controls in place for high-risk processes including Data Quality, Program/Project Management, and Vendor/Third Party Management.
- Led the evaluation of adherence to newly implemented Enterprise Data Management Standards by developing and executing test plans over the Data Governance, Data Lineage, and Data Quality processes for key data domains.
- Recipient of department wide bi-annual Gold Award for identification of critical data quality management gaps resulting in an overhaul of policies.
- Led the testing of design and effectiveness for internal controls over the BC/DR; IAM; Change Management/SDLC; and Incident/Problem Management processes.
- Led the IT portion of an integrated audit evaluating the configuration of systems calculating customer reserve requirements for SEC Rule 15c3-3 compliance.
- Coordinated with Technology Management in monitoring the execution, collection, and completion of SOX control activities.
- Collaborated with partners to identify automation opportunities to promote efficiencies in testing.
Technology Risk Manager
Ernst & Young (EY)
New York, NY
09.2014 - 07.2017
- Co-sourced by Fortune 100 telecommunications and pharmaceutical/healthcare companies to serve as Audit Manager leading multiple cyber workstreams over newly acquired entities. Primary domains of focus included Asset Management, Business Continuity/Disaster Recovery (BC/DR), Identity and Access Management (IAM), and Information Security. Responsibilities included planning scope of work, communicating with stakeholders, overseeing the audit execution and reporting phases, developing remediation action plans, and coaching client staff.
- Co-sourced by Fortune 100 multinational industrials conglomerate to serve as Project Manager for 18 cyber internal audit workstreams across six (6) business units. Responsibilities included budget and resource management, deliverable quality review, and tracking management action plans.
- Led pre-acquisition IT security assessment for Fortune 500 healthcare company against the NIST Cybersecurity Framework (CSF) to determine acquiree's program maturity, identify gaps between current and desired states of the program, and outline improvement opportunities through recommendation roadmaps.
- Selected by management to participate in the cyber, logical, and physical security assessments over a supplier on the behalf of a Fortune 100 corporation to determine if intellectual property was properly safeguarded in accordance with the agreement between the client and supplier.
- Led execution of fieldwork to evaluate the design, implementation, and effectiveness of the internal controls over financial reporting systems under SOX for various sized companies.
- Performed evaluations of the design and effectiveness over the Vendor/Third Party Management process for various sized companies by reviewing SOC 2 reports, including assessing complementary user entity controls (CUECs).
- Coordinated and managed on- and off-shore teams to conduct testing to determine the operating effectiveness of client IT controls, for both internal and external audits.
- Provided consulting support to defense agencies to assist in the compliance certification of several command centers utilizing FISCAM and NIST.
Senior Staff Consultant
Kearney & Company
Alexandria, VA
04.2012 - 09.2014
- Supported the IT portion of a financial statement audit for a large defense agency.
- Assisted in the evaluation of the design and effectiveness of security and privacy controls over their respective financial systems, utilizing FISCAM and NIST 800-53.
- Assisted in testing the design of controls for the IT portion of an OMB Circular A-123 assessment of an independent federal agency against FISCAM.
- Developed SQL database to support a performance audit of a federal executive department with the capabilities of storing documentation received from the client, creating testing matrices, storing tested items, and generating detailed reports about the status of information received and testing performed for management.
- Assisted in the execution of fieldwork over the Property, Plant, & Equipment (PP&E) and Financial Statement Reporting processes for a federal executive department to determine compliance to the FASAB framework.
Junior Accountant
Rexroad Consulting Group
Annandale, VA
06.2011 - 04.2012
- Organized, analyzed, and maintained financial records for clients by analyzing balance sheets and general ledger accounts.
- Prepared journal entries and completed tax computations/returns for clients.
- Assisted with the preparation and coordination of the audit process.
Education
B.S. - Accounting & Information Systems
Virginia Polytechnic Institute and State University (Virginia Tech)
Blacksburg, Virginia12-2011
Skills
- Excel
- SQL
- Identity access management
- Technology audit
- Risk based auditing
Personal Information
Title: Technology Risk Manager
Certification
- Certified Information Systems Auditor (CISA), January 2020
- ISACA
Timeline
VP, Technology Audit Manager
JPMorgan Chase
06.2024 - Current
Cyber Risk, Manager
Grant Thornton
04.2021 - 03.2022
Assistant Vice President - Supervisor, Global Technology & Operations
Bank of America
08.2017 - 03.2021
Technology Risk Manager
Ernst & Young (EY)
09.2014 - 07.2017
Senior Staff Consultant
Kearney & Company
04.2012 - 09.2014
Junior Accountant
Rexroad Consulting Group
06.2011 - 04.2012
B.S. - Accounting & Information Systems
Virginia Polytechnic Institute and State University (Virginia Tech)