bruno buresi

* Scope: i-BP subsidiary (informatique Banque Populaire), in charge of retail banking IT development, exploitation and monitoring. * Objective: * Execution and management of audit assignments in accordance with audit plan * Drafting analyses, appraisals, recommendations, counsels and information concerning activities reviewed * Contribution to the annual audit plan and risk assessment * Leading external auditors on specific assignments * Member of project team in charge of setting up half-automated corrective measures follow-up process * Main missions covered: * IT operations and processes * safeguarding of assets * IT licences management * Review of third party contracts * Framework: * ITIL (information technology infrastructure Library)

* Objectives: * Analysis of operational processes, diagnosis, issuance of observations and presentation to management. * Performing testing of IT controls at clients' businesses with a primary focus on providing assurance on whether systems are developed, configured and implemented to achieve management's objectives and deliver accurate financial data * Build effective relationships with client staff at all levels * Scope included: * Assistance to statutory audit: * IT general controls / ITGC (logical access, change management, IT exploitation) * IT application controls / ITAC in SAP R/3 environment * Sarbanes-Oxley (SOx) compliance reviews * Purchase due diligence * IT projects review (organization, budget, governance) * Segregation of duties review on sales, purchase and Financial process * Data migration process * Control frameworks used: * COSO, COBIT * Audited applications: * SAP R/3

* Department: Investigations and Controls * Activity scope: Asset Management companies (equity/rates, real estate, private equity/private debt, securitization, other goods) * Control topics: * Compliance to certification * Valuation of funds * Performance fees * Products sales process * Conflicts of interest * Financial modeling and structuring * Capital funds and accounting * Brokers selection process * Regulatory context: * France Financial and Monetary Code (including AMF general regulation) * European directives UCITS and AIFM