David Doney

Background

About David Doney

I'm the Audit Officer / Chief Auditor for the Illinois Municipal Retirement Fund (IMRF). My diverse experience includes over 10 years as a chief auditor, four years of leading SOX efforts for public companies, audit committee and C-suite partnership, risk program development (ERM, privacy, and third party), and designing engagements to address operational risks.I've evaluated IT general controls for SOX and SOC2 reports, using a variety of IT and privacy frameworks (e.g, GDPR Articles, AICPA Trust Services Criteria/SOC 2, ISO27001, COBIT, and FFIEC Examination Criteria.)My process improvement approach includes a blend of techniques from traditional audit and Six Sigma, such as process mapping, data analysis and visualization, identification of rework scenarios and their causes, and comparison of control activities against industry best practice frameworks. I use a variety of engagement types, from traditional audits to facilitated project management.I'm also an expert supervisor and teacher, from developing auditors to delivering conference presentations. I've led individual teams of up to 10 auditors, and directed two teams including 20 auditors and two managers. I've delivered over 20 presentations at industry conferences for the MIS Institute and IIA. I teach an intermediate data analysis and visualization course using Excel.EXPERTISE: Audit Committee | SOX | Internal Controls (COSO)| Operational Auditing | Process Improvement | Six Sigma Green Belt | IT Auditing | SOC 2 | Privacy (GDPR)| Risk Management (ERM)CERTIFICATIONS: CPA, CIA, Passed CISA ExamINDUSTRY KNOWLEDGE: Retail | Logistics | Real Estate | Manufacturing | B2B