Looking for a job

Mark Fabsits

@markfabsits

IT SOX and risk assurance consultant working across regulated industries, leading enterprise audits and quarterly User Access Reviews.

United States

Message

As an independent consultant, I lead IT SOX compliance audits and quarterly User Access Reviews across complex enterprise environments. I also apply my knowledge of DeFi, Web3 networks, cryptographic security, and Layer 1 and Layer 2 protocols.

At SOAProjects, I conducted quarterly User Access Reviews for applications and databases, using PingID analysis to identify untimely terminations. I also established an integration baseline for “Get Users” between source systems and Veza Access Review.

At Resources Global Professionals (RGP), I managed end-to-end IT SOX audit engagements across multiple industries. I led the Change Advisory Board for in-scope Finance systems and served as SOC 1 Report lead.

Earlier, I worked on IT SOX audits and control assessments at PricewaterhouseCoopers (PwC), Ranzal, and Chevron, including work involving Hyperion Financial Management. I’m a Certified Information Systems Auditor (CISA) with a background in finance and business administration.

Experience

Work history, roles, and key accomplishments

Current

Independent Consultant

Current

Self Employed

Dec 2024 - Present (1 year 10 months)

Lead independent IT SOX compliance audits and quarterly User Access Reviews across complex enterprise environments, ensuring alignment with control objectives and security protocols. Apply deep technical expertise in decentralized finance (DeFi), Web3 networks, cryptographic security, and secure wallet configuration.

SOX Compliance IT Audit User Access Reviews DeFi Web3 Cryptographic Security Layer 2 3 4+ Technologies Bitcoin Architecture Tokenized Ecosystems Hardware Software Setup

IT SOX Consultant

SOAProjects

Apr 2024 - Oct 2024 (6 months)

Conducted quarterly User Access Reviews for multiple applications and databases; developed and tested SOX datasets to identify untimely terminations via PingID analysis and performed lookbacks to confirm timely access revocation. Established integration baseline for 'Get Users' functionality between source systems and Veza Access Review.

SOX Compliance User Access Reviews PingID Veza Data Reconciliation Access Revocation SQL

Manager & IT SOX Audit Coordinator

Resources Global Professionals

Feb 2016 - Feb 2023 (7 years)

Managed end-to-end IT SOX audit engagements across multiple industries, performing risk assessments, control design evaluations, ITGC testing, and ITAC testing. Led Change Advisory Board for in-scope Finance systems and served as SOC 1 Report lead.

SOX Compliance IT Audit ITGC ITAC Risk Assessment Change Management SOC 1 Access Control Segregation of Duties Backup And Recovery

Senior IT SOX Audit Consultant

BayOne Solutions

Dec 2014 - Dec 2015 (1 year)

Executed year-end ITGC testing for Windows and UNIX platforms and supported special projects including IT process improvements and system implementations. Led CCAR and DFAST finding remediation efforts focused on model risk management and data governance.

SOX Compliance IT General Controls (ITGC) Testing Windows Unix CCAR D FAST Model Risk Management Data Governance remediation

Senior Associate, Enterprise Performance Management

PricewaterhouseCoopers

Dec 2011 - Jul 2014 (2 years 7 months)

Performed IT SOX audit engagements for clients including Google, Oracle, Cisco, and Time Warner Cable, assessing risks and evaluating internal controls over financial reporting. Specialized in Hyperion Financial Management and Essbase Planning.

SOX Compliance IT Audit Hyperion Financial Management Essbase XBRL SEC Reporting Internal Controls

Sarbanes-Oxley Technical Control Writer

Ranzal

Feb 2009 - Dec 2009 (10 months)

Rewrote technical controls for Chevron's HFM system conversion project to meet PwC audit standards and assessed SOX controls for the Hyperion Financial Management system. Managed CIRS exception process and provided information protection and data privacy consulting.

SOX Compliance Hyperion Financial Management Technology Controls Data Privacy CIRS Audit Standards (ISA)

Comptroller's Sarbanes-Oxley Assessor

Chevron

Oct 2006 - Jan 2009 (2 years 3 months)

Managed SOX controls auditing for Chevron's Hyperion Financial Management system and led the CIRS exception process. Created the Comptroller's data privacy plan, coordinated information risk management, and supported the HFM system upgrade.

SOX Compliance Hyperion Financial Management CIRS Data Privacy Risk Management System Upgrades