Kelly Mack
Windsor,WI
Summary
Experienced IT audit professional with expertise in audit planning, risk assessment, control testing, and privacy compliance. Proven track record of preparing clear audit reports, supporting fieldwork, and delivering recommendations that strengthen internal controls and regulatory compliance.
Overview
1
1
Certification
17
17
years of professional experience
Work History
Experienced Audit Senior
BDO
Chicago, Illinois
2020.02 - Current
- Supported audit engagements under BDO methodology across diverse client portfolios.
- Prepared audit procedures and evaluated risks for IT, Privacy, and AI statement areas.
- Managed client requests and ensured clear communication during fieldwork to facilitate timely resolution of issues.
- Assisted junior auditors with testing documentation and review tasks.
- Developed test plans to assess the audit procedures for the multiple IT Frameworks, Standards, and Requirements.
- Prepared detailed reports on audit findings with actionable recommendations to enhance compliance and operational efficiency.
- Conducted in-depth interviews with clients' management to gain insights into processes and systems, informing audit strategies.
Compliance Analyst: Data Privacy & Cybersec
Accuray
Madison, WI
2018.02 - 2020.02
- Developed a Data Privacy Program for compliance with GDPR and CCPA.
- Worked with National Teams from hospitals, medical device manufacturers, software development, and compliance industry leaders such as FDA and H-ISAC to develop Cybersecurity requirements for medical devices.
- Documented process gaps and recommended workflow improvements, by enhancing operational efficiency for Accuray teams.
- Identified and prioritized process improvement opportunities, driving organizational effectiveness.
- Cultivated positive relationships with staff and management, fostering a collaborative work environment.
- Set specific goals for projects to measure progress and evaluate end results.
Senior IT/IS Internal Auditor
WPS
Madison, WI
2015.01 - 2018.02
- Developed and executed internal audit reviews across WPS healthcare operations to ensure compliance and risk mitigation.
- Tested compliance with policies, regulations, and internal audit standards.
- Documented audit findings and delivered actionable observations to management for strategic decision-making.
- Coordinated interviews with WPS staff to gather process details.
- Evaluated corrective actions and tracked follow-up on audit issues.
- Drafted audit reports to display findings.
- Supported external auditors during annual audits by coordinating data provision and clarifying audit processes.
IS Client Server/Programmer Analyst III
WPS
Madison, WI
2009.08 - 2015.01
- Documented server configurations and procedures, streamlining escalation steps for WPS.
- Ensured compliance with regulatory standards such as HIPAA, FISMA, CMAC, and MAR IT controls for financial accountability.
- Troubleshooted hardware and software issues related to servers and applications.
- Provided technical support to customers, resolving server and application issues to enhance user experience.
- Maintained application code and resolved defects in production and test environments.
- Analyzed user requirements and translated them into clear technical specifications.
- Participated in disaster recovery drills, strengthening organizational preparedness for emergency situations.
- Collaborated with cross-functional teams to support project delivery and code reviews.
- Updated existing applications to improve stability and support business needs.
Education
Bachelor of Science - Information Technology
University of Phoenix
Tempe, AZ2010-05
Skills
- IT audit management
- Risk assessment
- Control testing
- Regulatory compliance
- Data Privacy Program
- Data Privacy Management
- Audit documentation
Certification
- ISACA - CISA - Certified Information Systems Auditor
- ISACA - CRISC - Certified in Risk and Information Systems Control
- ISACA - CSX - Cybersecurity Fundamentals Certificate
- CCSFP - HITRUST Certified CSF Partitioner
- ISO/IEC 27001:2022 Transition Lead Auditor
- ISO/IEC 27701 Foundations
- ISO/IEC 42001: Lead Auditor (by end of October)
- ISO/IEC 9001: Lead Auditor (by end of October)
Timeline
Experienced Audit Senior
BDO
2020.02 - Current
Compliance Analyst: Data Privacy & Cybersec
Accuray
2018.02 - 2020.02
Senior IT/IS Internal Auditor
WPS
2015.01 - 2018.02
IS Client Server/Programmer Analyst III
WPS
2009.08 - 2015.01
Bachelor of Science - Information Technology
University of Phoenix