MARTHA MENDEZ

Address: 3002 N Airport Road, Jasper, AL, 35504. Cell Phone: (205)2759315
SUMMARY
Supervisor Senior with 16 years total experience in the IT field that includes 9
years of Big Four External Audit and Internal Audit experience and IT Control C
onsulting experience across several industries. Recognized for strong IT Audit,
Operational Audit, IT Governance, IT Risk Management, IT Assurance, IT Complianc
e Audit skills and expertise. IT technical skills. Near to receive MBA focused i
n Project Management Degree. Outstanding analysing, high level of responsibility
and commitment. Bilingual. Speaking Spanish fluently and English competently.
Areas of Practice
* Recognized experience for several industries, planning, supervising and execu
ting IT audits supporting Operational and Financial External and Internal Audit
teams, testing controls, reporting and follow-up, related to assessments of:
* IT Governance practices (COBIT)
* IT Risk
* Computer General Controls
* Business Cycle's Risk and Controls including Risk of Fraud
* Application Controls, User Access Security and Control Gaps in ERP systems: S
AP, JDE, BAAN, MIMS, ORACLE FINANCIALS and in-house applications (that support t
reasury process, payments and bank transfers, purchases, orders, billing, receiv
ables, payables, inventories processes, fixed assets, etc) to know the integrity
between processes and technology
* IT SOX and Canadian rule MI 52-109 Compliance Audit
* Technological Infrastructure Security
* Operational and Financial Audits support
* Experience executing operational audits (no IT audits) as Joint Venture agree
ment process audit in oil companies
* Experience working as consultant as part of the team for SOX IT and Canadian
rule MI 52-109 Compliance Readiness (developing IT security and IT control polic
ies, guidelines, procedures)
* Business Analysis / Data Analysis
* Network, Server and Database Management.
Industry Lines
* Utilities (Energy: Generation, Transportation and Retail, Water, Telecommunic
ations)
* Oil Exploitation and Refinement - Coal
* Construction (Cement, Aggregates)
* Manufacturing -Beverages Pharmaceutical - Aeronautics -Services - Retail
EXPERIENCE
BIG FOUR - DELOITTE, Bogota, Colombia (South America) Sept.2008 - Dec-2008
TRC-Technology Risk Consulting Area, Experienced Senior Consultant
Evaluated and implemented IT controls in Pacific Rubiales Energy (Canadian - Col
ombian oil company) as part of the Deloitte outsourcing team in charge of readin
ess to fulfill Canadian internal control certification regulation, rule MI 52-10
9 (similar IT SOX regulation). Evaluated processes controls (non IT controls) in
the JVA Joint Venture agreement to identify control gaps and to define action p
lans to reduce control weaknesses. After this job the family was moved to live t
o USA because of her husband job.
INFOSEC, Barranquilla, Colombia (South America) March 2006 - Aug. 2008
IT Audit Supervisor Senior
Planned, supervised and performed the Outsourcing of IT Audit performed by INFOS
EC for customers of Baker Tilly in Barranquilla, Colombia (South America), achie
ving the total customer satisfaction. BAKER TILLY is the 13 th largest CPA and a
ccounting firm in USA.
BIG FOUR - KPMG, Barranquilla, Colombia (South America) Aug. 2004 -Feb 2006
IRM - Information Risk Management Area, Supervisor Senior (Manager in Charge)
As Supervisor Senior managed and directed the KPMG Information Risk Management p
ractice in the Colombian Caribbean Coast and gave support to KPMG national pract
ices within Colombia, planning, supervising and performing Computer General Cont
rols and JDE application Control and Security evaluations, as part of the KPMG O
utsourcing of the Internal Audit Service for Argos Group, achieving the total cu
stomer satisfaction.
Supervised until five auditors distributed in cities of Colombia, to ensure that
audit tasks were completed accurately and within established timeframes. Coordi
nated with various departments to create remediation plans for deficiencies foun
d during audits. Argos Group have 40 companies in Colombia, is the lead of the c
olombian cement industry, is the fifth Latin American producer of cement and is
one of the ten biggest producers of concrete in the USA.
BIG FOUR - DELOITTE, Bogota and Barranquilla, Colombia (SAmerica) Dec. 1998 - Ap
ril 2004
TRC-Technology Risk Consulting Area, Experienced Senior Consultant
Led the Deloitte Technology Risk Consulting practice in the Colombian Caribbean
Coast, specifically related to evaluation of Computer General Controls (IT plann
ing, networks, operating systems, databases, software and hardware support, secu
rity, and disaster recovery) and application controls and security as part of Co
ntrol Assurance Area engagements for client companies, planning and supervising
the IT auditors job. Reported findings and presented recommendations for improvi
ng the IT control and security environment in companies of industries as utiliti
es: energy, water, telecommunications, oil, manufacturing, beverage, services.
As part of the Deloitte PTI - Process and Technology Integrity practice working
for Bogota office:
Supported the planning, supervising and performance of SAP audits (FI, AM, BASIS
modules etc) for important energy and manufacturing companies based in importan
t cities of Colombia to know how the IT technology supported the business object
ives.
Performed activities related to the development of IT security policies, procedu
res, and guidelines as part of IT Security Model Design projects
The major client companies where perfomed IT auditing activities belong to utili
ties (generation, transportation and retail of energy, as Codensa, Electricaribe
y Electrocosta, ISA, ISAGEN, Transelca), water (Aguas de Cartagena), petroleum
exploitation and refinement (Ecopetrol, Pacific Rubiales Energy), telecommunicat
ions (Telecom, Comcel, Metrotel), coal export (Cerrejon), manufacturing (Bayer,
Procaps, Basf, Clorox, etc), aeronautics (Aeronautica Civil), beverage industrie
s as Coca Cola and Bavaria, retail company in Costa Rica.
NETWORK LTDA, Bucaramanga, Colombia (South America) Jan. 1997- Nov. 1998
IT Consulting Leader
Performed activities related to networks and servers management for customer com
panies of Network Ltda
ECOPETROL (Most Important Colombian Oil Company), Colombia -SAmerica Jan. 1993-D
ec.1996
IT Consultant
Working in the Refineries of Barrancabermeja and Cartagena:
* Developed web sites on ORACLE WEB SERVER using PL/SQL and HTML and the "ECOPE
TROL Refinery Operating Information System". Performed IT Audit of the "Ecopetro
l Refinery Operation Cost " application.
* Installed, configured and managed Novell Intranetware, Solaris, SunOS, Unix a
nd Windows NT servers and networks. Trained computer users.
UNIVERSIDAD INDUSTRIAL DE SANTANDER, Bucaramanga, Colombia Aug. 1991- Nov. 1992
Assistant of "Oil field simulation"
Working for the "Petroleum Engineering Department" supported the maintenance of
Oil Field Simulation software applications
EDUCATION/QUALIFICATIONS
 * MBA focused in Project Management (August/10). The Content include subjects r
elated to Project Management according with guidelines of PMI -Project Managemen
t Institute, Estrategic Management, Economy, Marketing Management, Estrategic Ma
nagement of Technological Innovation
* Bachelor Degree Computer Sciences - Universidad Industrial de Santander UIS -
Colombia (South America), Cum Laude
PERSONAL CERTIFICATIONS
* CISA -Certified Information Systems Auditor (ISACA), 2002
AWARDS
* OAS - Organization of American States scholarship for graduate studies, 2009
* Enterprising of the Year - INCUBAR DEL CARIBE - Barranquilla, Colombia (South
America), 2007
* Cum Laude Award - UIS - GPA 4.03
* Andres Bello Award (Best Colombia High School Students) Test Score: 387/400
AFFILIATIONS
* Member of ISACA - Information Systems Audit and Control Association
* Member of IIA - The Institute of Internal Auditors
COMPUTER SKILLS
* IT security on Operating Systems as Unix, Solaris, SunOS, AS400, Windows NT/2
00X Server
* IT security on Oracle, SQL Server /IT security and IT controls on ERP applica
tions: SAP (BASIS, FI, AM modules,etc), JDE, ORACLE FINANCIALS, BAAN , MIMS
* SQL, PL/SQL, Oracle Web Server, ACL, Access,Visio, Microsoft Office