Looking for a job

Andrew Pinnero

@andrewpinnero

Message

I lead IT audit, technology risk, and regulatory remediation programs for financial services organizations.

United States

Message

I'm supporting remediation of a large bank Part 30 Notice at Robert Half International, working directly with the bank's 1LOD Head of IT Risk Management on solutioning and remediation workstreams.

Previously at Protiviti, I directed IT audit for a large regional bank, managed more than 20 staff, and led IT risk assessments, SOX, ITGC, cloud security, cybersecurity, and audit remediation work. I've also helped organizations through public-company transformations and contributed COSO guidance on Information Technology used by thousands of organizations.

Experience

Work history, roles, and key accomplishments

Current

Associate Director

Current

Robert Half International

Jun 2025 - Present (1 year 3 months)

Engaged on a project supporting remediation of an IT related large bank Part 30 Notice. Working directly with the bank's 1LOD Head of IT Risk Management in solutioning and remediation workstreams.

IT Risk Management remediation Banking Regulatory Compliance

Associate Director

Protiviti

Jun 2014 - May 2025 (10 years 11 months)

IT Audit Director for a large regional bank, managing over 20 IT Audit staff and all IT audit planning, Board/Audit Committee reporting, and IT risk assessments. Led a wide variety of ITGC, security, and technical configuration audits across on-prem and cloud/SaaS platforms.

IT Audit IT Risk Sarbanes Oxley IT General Controls Cybersecurity NIST GLBA Cloud Security Change Management AuditBoard TeamMate FFIEC COSO COBIT ISO 17799 ITIL SSAE16 SOC SDLC SOX AML BSA

Principal

Veris / Johnson Lambert LLP

May 2004 - May 2014 (10 years)

Managed IT based audits for clients such as Citizens Insurance, Guardian Insurance, AAA-Mid Atlantic, and Harvard University. Led marketing efforts for IT audit, IT AUP, and SOC related engagements and managed a team of IT audit professionals performing security reviews.

IT Audit Security Reviews Mainframe Linux Unix Windows Server Apache Cisco ASA Point Hyperion Peoplesoft Pro Financial Duck Creek COSO COBIT ISO 17799 ITIL SSAE16 SOC

Manager

KPMG LLP

Apr 2001 - Apr 2004 (3 years)

Managed IT audit staff performing general IT control reviews, application reviews, and operating system and network security assessments for Fortune 500 companies in financial services and life sciences. Generated IT relevant management letter comments for client audit committees.

IT Audit IT General Controls Application Review Operating System Security Network Security Financial Services Life Sciences

Staff / Senior Associate

Ernst & Young LLP

Jan 1998 - Mar 2001 (3 years 2 months)

Managed intranet security websites for Fortune 500 clients using NetObjects Fusion. Developed and maintained proprietary C/C++ programs for the tax practice and performed in-depth RACF/MVS audit procedures for global insurance and banking institutions.

NetObjects Fusion C C++RACF COBOL IT Audit