Nico Vera Cruz, CPA, CISA, CRISC's Email

Senior IT & Risk Assurance Associate @ Deliver risk assurance services to local and multinational clients seeking creative and cost-effective solutions to their complex business problems by providing the following: • IT General Controls Review o Understand and test client’s general controls over IT which includes access to programs and data, computer operations, program changes, and program development to perform an assessment on their design and operating effectiveness to mitigate IT risks. Entity-level controls over IT are also taken into consideration during the said review. o Provide value-adding recommendations to clients pertaining to IT, including IT governance, security, and industry practices. • Business Process Review o Plan and perform detailed process reviews to identify risks over IT and business processes that could result in failure to achieve process objectives or misstatements in financial reporting. o Plan and perform test of controls to assess effectiveness as to design and operation. • Internal Audit Outsourcing/ Co-sourcing o Perform internal audit services for clients including preparation of audit plan and audit work programs as well as their execution. From April 2014 to May 2015 (1 year 2 months) CPA Practitioner @ - Accounting and Tax Compliance services - Legal Services (e.g. Collection Cases) From March 2013 to February 2014 (1 year) IT Internal Auditor @ From January 2013 to May 2013 (5 months) IT Auditor/CPA @ Key Responsibilities: Perform IT audit for IT internal audit co-sourcing/outsourcing engagements, IT audit support for external audit, and for due diligence engagements through the following reviews: IT General Controls Review -Review client’s IT strategic planning and organization and make recommendations to ensure that IT objectives are aligned with the company’s mission, vision and business objectives. -Identify risks and review the design and operating effectiveness of controls over program change management, information security, and computer operations affecting applications, databases, and operating systems. -Perform review of disaster recovery and business continuity plans and assess their sufficiency to achieve their purpose. Business Process Review -Perform detailed process walkthroughs to facilitate understanding of client’s IT and business processes and identify potential risks that may result in misstatements in the general ledger, information security weaknesses, and asset misappropriation. -This review also includes identification and assessment of design and operating effectiveness of application, IT-dependent manual, and manual controls. IT Internal Audit Outsourcing/Co-sourcing -Provide risk-based, process-focused audit methodology. This includes risk assessment, planning, execution, and reporting. -Prepare audit plan and audit work programs. -Note audit findings and identify condition, criteria, cause, effect, and recommend relevant and possible action plan/s. From November 2011 to January 2013 (1 year 3 months) Special Lecturer @ Handled the following subjects: -Accounting Information System -IT Auditing and Assurance From August 2012 to 2013 (1 year) OJT @ From April 2010 to May 2010 (2 months)

Bachelor of Science (BS), Accountancy @ San Beda College From 2007 to 2011 Bachelor of Arts (B.A.), Public Administration @ University of the Philippines From 2006 to 2007 Secondary Education; Special Science Curriculum @ Zamboanga del Sur National High School From 2002 to 2006 Nico Vera Cruz, CPA, CISA, CRISC is skilled in: Internal Controls, Auditing, Internal Audit, IT Audit, flowcharting, Process Review, Risk Assessment, Bookkeeping, Flow Charts, Accounts Payable, CPA, Account Reconciliation, Business Process, Enterprise Risk Management, CISA