Thomas Penksa CISSP,CISA

Thomas_Penksa@hotmail.com
345 Danbury Dr
Cheektowga NY, 14225
Cell Phone 716.864.6142
Word Version

Education

Bachelors of Science in Management Information Systems, July 2004
State University of New York, College at Fredonia, Fredonia NY

Experience

M&T Bank
IT Audit Supervisor

  • Planned audits based on inherent and residual risk, along with considering multiple levels of impact based on possible control deficiencies.
  • Developed understandings of complex technology platforms and infrastructures, evaluation application integration along with identified controls for effectiveness.
  • Fostered relationships with technology, functional, and business groups within the bank, to allow for a team approach for the implementation of audit recommendations.
  • Executed audit programs, and managed a time budget to meet a specified deadline for completion per the audit plan.
  • Made recommendations to improve bank wide IT controls to middle and senior management.
  • Managed and supervised one to two staff and/or assistant supervisors, ensuring their work was completed on time and to audit standards.
  • Participated in the annual SOX 404 audit execution.
HealthNow NY Inc
IT Auditor
  • Participated in FY2006 Risk Assessment and planning of the master audit plan.
  • Developed Audit Programs for audit work based on CobiT frameworks.
  • Performed audit work, including research, testing, documentation of findings, and final audit reports based upon IIA standards.
  • Made recommendations on improving internal controls based on industry best practices, along with current laws and regulations (HIPAA compliance, etc).
  • Gained big 4 audit planning, execution, and reporting experience from Ernst and Young through a co-sourced arrangement.
Localnet Inc.
Sr. Support Technician
  • Handled incoming calls for troubleshooting, which included (but not limited to) password resets, email problems, connectivity issues, etc.
  • Trained new hires with regard to troubleshooting procedures and call documentation.
  • Documented all calls handled to allow for other techs to review in their procedures for further calls.

Professional Affiliations

  • The Institute of Internal Auditors (IIA)
  • Information Systems Audit and Control Association (ISACA)
  • (ISC)2

Programming Languages

  • C++
  • Visual Basic
  • HTML
  • PHP
  • SQL
  • Assembly

Web Design

Local chapter of the Information Systems Audit and Control Association (ISACA)
www.isacawny.org