Andre Lossowski

Experience

• 

  Arthur Andersen & Co.

  Apr 2001 - Aug 2001

  Internship Technology Risk Consulting

  Performed IT General controls audits to evaluate control design and test operating effectiveness.

• 

  SAP / Steeb Anwendungssysteme

  Mar 2002 - Jul 2002

  Diplom thesis student

  Developed a SAP Business Warehouse implementation road map and business blueprint. Performed design assessments to identify business requirements and developed technical specification.

• 

  PricewaterhouseCoopers AG WPG

  Jan 2004 - Mar 2012

  Manager Risk Assurance

  Led process assurance teams on multiple global engagements to perform internal controls audits. Initiated and managed multiple controls optimization projects across financial disciplines, including Financial Accounting, Order To Cash, Purchase To Pay, Shared Services as well as IT processes. • Designed and implemented IT General Controls for an Oil & Gas company as part of a 6 mill $ SOX readiness project including control definition, management testing setup, policies and procedures, dry run.• Performed multiple internal controls audits for a pharma company worldwide (Asia, North America, Europe) including test plan development, audit coordination, coaching and supervision of local auditors, communication of results to executive management.• Managed an internal controls harmonization project for a pharma company which enabled to reduce the maintenance effort for internal controls assessments by 400K $ per year and returned efficiency to the finance and IT functions.• Managed business processes optimization projects: implemented compliance reporting process on internal controls performance to prevent audit exceptions. Initiated and managed process of rebuilding the internal audit team from scratch into a highly functioning and valued department.• Developed and improved learning materials for the PwC global SAP ERP ITGC audit training program and trained internal audit professionals and PwC new-joiners across the PwC Eurofirm. Show less

• 

  PwC

  Mar 2012 - Nov 2017

  Led large process assurance teams on external audit, internal audit and data analytics engagements. Managed and coached staff to perform evaluation and testing of IT General Controls including, ERP security, access SOD, infrastructure components. Assisted clients in establishing and optimizing their internal control systems, including control environment and control activities. Performed risk analysis and provided recommendations to management for strengthening of controls enabling improvement of operating effectiveness, cost savings and standardization of processes and procedures. • Led audit teams on five Fortune 500 public companies (SOX-regulated) and presented results directly to executive management. Managed audit teams to identify key controls in major cycles (purchase to pay, order to cash, financial accounting) and IT General Controls, perform evaluation of design and operating effectiveness testing applying PCAOB auditing standards.• Performed pre-implementation audits for multiple global ERP migration projects and assessed technical and organizational readiness in local entities (North America, Germany, Australia) in order to identify implementation risks. Provided recommendations that enabled successful rollout and avoided accounting and compliance issues.• Harmonized SAP ERP audit programs within the local PwC practice resulting in standardization and improved quality of audit procedures.• Managed an ERP specialist team on a strategic audit transformation project to build data analytics for SAP ERP, enabling identification of higher risk transactions, process inefficiencies and error/fraud.• Successfully passed 3 PCAOB and 5 Internal inspections without any quality issue. Show less

  • Director Risk Assurance

    Jul 2016 - Nov 2017

  • Manager Risk Assurance

    Mar 2012 - Jun 2016
• 

  DuPont

  Nov 2017 - now

  Audit Manager - IT (Head of IT Internal Audit)

  Direct leadership for a team of 12 IT Internal Auditors. Lead all aspects of the IT audit plan and its execution including scope definition, staff management, budgeting, test plan sign-off, staff coaching, engagement oversight and reporting sign-off. Actively involved in the strategic direction of the audit competency. Drive quality improvement by applying best practices. Expand capabilities of the IT Internal Audit group to audit systems implementations, cyber security, data governance and privacy. Establish data analytics competency within Internal Audit.Directly communicate with IT leadership to provide insights into audit findings and facilitate identification of practical solutions for improvement and remediation.Report to the general auditor and prepare IT Internal Audit results for the audit committee.Build relationship with the external auditors to support reliance approach and satisfy quality requirements.Lead recruitment initiative to hire new talent using existing network as well as involving internal and external recruiters. Perform vendor selection and lead implementation of audit management tool AuditBoard.Built up a team of 8 permanent IT SOX auditors at the India SSC replacing external service providers. Show less