Alex Vorpahl

Based in Philadelphia, Alex is an innovator in Protiviti’s Internal Audit – Technology Consulting Practice, focusing on data analytics and compliance advisory issues. He serves international retail and financial institutions as well as regional manufacturers, helping them improve operational efficiency and identify areas of risk. In addition, he advises clients on the development and use of custom analytic solutions to deliver exceptional outcomes.

Examples of his work in include: 

• designing and executing continuous monitoring capabilities for organizations
• developing custom data analytics to combat organizational and fraud risk indicators
• assist a large international financial institution in preparing for a cloud migration of several of its applications and servers within the Cloud Security Alliance (CSA) Cloud Control Matrix (CCM) framework
• assess organizational IT General Control compliance with various frameworks such as: COBIT, COSO, ITIL, NIST 800-53 Revision 4 and industry frameworks such as the Federal Financial Institutions Examinations Council (FFIEC), FFIEC Cyber Security Framework (CSF), and Gramm-Leach-Bliley Act (GLBA).

CliftonLarsonAllen
Senior IT Consultant
Jun 2013 – Dec 2016

• Manage and perform IT General Control Review assessments. Frameworks for review incorporate elements of COBIT, COSO, ITIL, NIST 800-53 Revision 3 and industry frameworks such as the Federal Financial Institutions Examination Council (FFIEC) and Gramm-Leach-Baliley Act (GLBA)
• Lead and Manage Statement on Standards for Attestation Engagements (SSAE) No. 16 audits including the Service Organization Control (SOC) SOC 1 and SOC 2
• Design and implement data analytic assessments
• Coordinate assessments of Infrastructure and Application control reviews relating to data integrity for the general ledger systems and those application systems which directly impact revenue, asset valuation and expenses for financial statement audit support
• Supervise, review work papers and provide coaching feedback to new staff 
• Contribute and independently develop custom scripts within Visual Basic to automate engagement tasks and objectives
• Published instructional videos on the use of Interactive Data Extraction and Analysis (IDEA) software