Larry Dibowitz

Background

About Larry Dibowitz

Larry is a Principal in EY's Technology Risk Assurance practice, based in San Jose California. He has over 30 years of accounting and information technology experience working globally. During his tenure with EY, he has worked with several Fortune 500 and startup companies and specializes in information technology (IT) risk management, IT auditing including Internal Controls over Financial Reporting (ICFR) or SOX, including design and implementation of SOX controls, cyber security assessments, IT governance and ERP system risk and controls implementation and testing. He has extensive experience partnering with companies to identify and implement solutions to solve business issues. Larry works with clients in a practical and collaborative way to manage their IT risk and, where needed, assist in the transformation of the function from a compliance-oriented focus to a risk management culture. Over the past twenty plus years, Larry’s focus has been working with small and large global online companies in both an audit and advisory capacity and assisting them in understanding, assessing, and mitigating risks in their business and technology organizations. His experience includes addressing the unique IT challenges associated with accounting for and recognizing revenue in online services, including internet advertising, travel, streaming, retail and gaming. Additionally, Larry has led several engagements to provide assurance reports over clients’ IT environments including SSAE 18/ISAE 3402 Service Organization Controls (SOC) 1 reports, SSAE 21 Reports on Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality and Privacy (SOC 2 and SOC 3 Reports); ISO/IEC 27001 Security certifications; FISMA NIST 800-53 security certifications; WebTrust and SysTrust.