Vinckel Sanchez

Experience

• 

  University of Puerto Rico

  Sept 2000 - Aug 2020

  Senior Information Technology Auditor

  Key Achievements• Identified and reported fraud within the Billing Receivable Module by simulating employee actions with a test account, successfully processing payments without affecting cash receivables. Promptly notified the Board of Trustees, leading to timely corrective actions before the final audit report.• Led the restoration and technical evaluation of the online distance education system under the federal CRECE 21 grant, uncovering critical issues that prompted criminal investigation by the Department of Justice of Puerto Rico.Experience• Evaluated the effectiveness of internal controls across governance, operations, and IT systems, ensuring alignment with strategic objectives, safeguarding of assets, and compliance with policies, laws, and regulations.• Conducted audits in compliance with frameworks including COBIT 5, COSO, ITIL, SOX, and NIST, assessing risk management and control processes across the university's operations.• Led annual risk assessments, developing risk-based audit plans in alignment with university goals to prioritize audit activities and mitigate emerging risks.• Research and data mining: Analyzed financial and operational data to identify trends, risks, and areas for improvement. Conducted independent investigations to resolve high-risk issues and inform decision-making.• Communicated audit findings and recommendations clearly to management, ensuring alignment with top-level objectives and integrating stakeholder feedback into audit reports.• Trained audit staff in data analysis techniques and the application of audit tools to enhance analytical capabilities and support evidence-based conclusions.• Report preparation: Developed accurate, concise, and unbiased audit reports, ensuring clarity and sufficient evidence to support recommendations.• Reviewed audit work and supporting documentation from team members, ensuring compliance with audit objectives, accuracy, and sufficiency of evidence. Show less

• 

  PR@MAX Corp.

  Feb 2010 - Dec 2016

  President

  • Led strategic initiatives for web design and consulting services, optimizing business processes and enhancing client systems.• Developed policies and implemented security measures to safeguard information systems, improving overall data integrity and operational security.• Designed and launched websites, branding assets, and logos for clients, significantly boosting their online presence and engagement.

• 

  Triple-S

  Aug 2020 - Oct 2024

  Information Technology Vendor Performance Senior Analyst

  • Developed and implemented the mission, vision, and goals for the IT Vendor Management Office (ITVMO), ensuring alignment with organizational objectives.• Designed and launched the "IT Vendors Improvement Program" leveraging frameworks such as ITIL, COBIT, ISO, and NIST.• Recovered approximately $2,000,000 in credits and reimbursements through rigorous contract reviews and internal controls.• Established and maintained Power BI dashboards to deliver actionable business insights to stakeholders.• Managed primary vendor operations delivering IT as a Service (ITaaS) in alignment with Master Services Agreements (MSA) and Service Level Agreements (SLA).• Developed and executed standard operating procedures (SOPs) for vendor agreement reviews, ensuring compliance and efficiency. Show less

• 

  Professional Services

  Nov 2024 - now

  Professional Services Consultant

  • Deliver comprehensive IT audit and compliance services to ensure alignment with industry frameworks such as SOX, HIPAA, ITIL, COBIT, ISO, and NIST.• Support internal audit teams by conducting technical evaluations, testing IT General Controls (ITGC), performing risk assessments, and facilitating cybersecurity and third-party risk assessments.• Collaborate with organizations to establish secure, efficient, and compliant IT environments by identifying risks, implementing mitigation strategies, and optimizing operational processes. Show less