Parm Lalli | Data Architect & Analytics | CISA, ACDA

Parm Lalli is a Principal with Planalytix and is a Data Architect and Data Analytics specialist. Parm has over 19 years of data architect, data analytics, audit, and controls experience with Planalytix and other IT consulting firms and is widely considered a leading data analytics practitioner in North America. Parm’s data analytics expertise includes vast experience with various Computer-Aided Audit Tools (CAATs), leading and performing data analytics and developing continuous controls monitoring (CCM) applications for many business processes. His experience also includes installing, implementing and configuring Alteryx, and providing training on all aspects of data analytics, from basic functionality to complex scripting and controls monitoring.

Parm’s 19 years’ experience with ACL Software includes six years working at ACL. During Parm’s time at ACL, he led the development of analytics for ACL’s CCM solution. These analytics covered risks associated with accounts payable, travel and entertainment, general ledger, order to cash, procurement, human resource and payroll. Once the analytics were developed, Parm led consulting projects for ACL clients where he implemented the analytics and assisted clients with the development and maturation of the data analytics and CCM programs. Parm has also worked at PricewaterhouseCoopers in the Advisory group where he performed Revenue Assurance consultancy with the Telco Industry.

Parm has also done numerous projects using Alteryx and is an Alteryx Certified Professional. Parm has completed numerous analytic projects using Alteryx is an advanced user of Alteryx. His expertise with Alteryx includes building macros and applications and API connectivity to cloud based environments.

Parm also has extensive experience with other data analytics tools and applications such as TOAD for Oracle & SQL Server, and Arbutus. In addition, Parm has experience with visual analytics tools like Tableau and Power BI.

Parm has assisted many clients with the design, configuration, and deployment of many data warehouses. He has recently become certified as a Cloud Analytics Master. Parm has a great deal of experience using API’s to connect to cloud-based systems and pulling and/or pushing data to and from a cloud based data warehouses.

In addition to his data analytics focus, Parm’s background is IT audit focused, having provided services related to IT general controls, application controls, internal audit, IT risk assessment, process improvement advisory, operational audit and Sarbanes-Oxley Act (SOX). Parm is a Certified Information Systems Auditor (CISA) and ACL Certified Data Analyst (ACDA), Alteryx Certified Profession (ACP) and speaks at many conferences throughout North America on the topic of Data Analytics.

EXPERTISE

Experience

„ Assisted a client with assessing their current data analytics program and developed a road map for them to take their data analytics program from infancy to full maturity.

„ Assisted a client in developing analytics around FCPA / Anti-bribery that were weighted based on various risk factors. All analytics were given a weight and then a weighted average was taken to identify transactions with highest risk. Many external data sources were considered for this process.

„ Developed many different analytics around Vendor Management to help identify issues with vendor setup, approval process, and potential fraudulent vendors. Assisted in developing analytics to identify vendor kickbacks or issues in the procurement / supply chain process.

„ Managed a project with a major client in Southern California to perform a data migration validation audit on data that was migrated from a legacy pension system to a new one. Developed SQL scripts and Alteryx workflows to compare data at the field level. Led weekly meetings to share findings of discrepancies so a ticket can be logged with the Vendor to fix issues. Identified errors in business logic that created reports for federal and state reporting based on raw data and developed our own logic based on business rules.

„ Utilized Arbutus data analytics tool to kick off numerous audit projects related to accounts payable, travel & entertainment, and procurement fraud around supply chain processes. Assisted many clients in the installation and configuration of Arbutus desktop and server products.

„ Led the development of a connector for SAP that can be utilized with Arbutus desktop to run data access queries. Worked with windows programmers and SAP ABAP developers to ensure the SAP connector would meet SAP certification requirements. Worked with SAP on performing certification steps to get the SAP connector certified.

„ Worked with various clients on using Alteryx data analytics to develop data access, blending, and analytic workflows around audit, risk, fraud, reporting and processes improvement. In addition, developed numerous SQL scripts to be embedded into Alteryx workflows.

„ Subject matter expert in various ERP systems which include SAP, Oracle, PeopleSoft, and JD Edwards. Recent engagements also include Microsoft Dynamic Great Plains and Lawson.

„ Planned and managed numerous data analytics automation projects to identify fraud and internal control weaknesses, as well as, revenue optimization opportunities for many organizations in different industries, ranging from telecommunications and manufacturing to hospitality and banking. Provided data analytics training to clients and multiple third parties.

„ Led a project for a large oil and gas company with developing a continuous controls monitoring application for their travel and entertainment business process. Oversaw requirements, data gathering and preparation, and code development. Assisted with results verification and presentation of findings to client management.

„ Managed a project to assist a major bank with their continuous controls monitoring efforts related to their purchase to payment cycle. Utilized ACL to perform data analytics to identify potential tests and helped identify high risk areas for test development.

„ Led a project to assist a major casino with performing data analytics for its credit card reconciliation initiative. As a result, eight auditors who spent 8 hours a day performing data analytics work were freed up to perform operational audits.

„ Managed a continuous controls monitoring project for a major bank, including preparing plans, designing objectives, and leading code development throughout the project. This project focused on key risks within their Time & Entertainment and procurement processes.

„ Developed and managed a continuous controls monitoring initiative for a major utilities company in Washington, D.C. Worked with clients to identify data requirements and potential tests based on available data.

„ Worked with a major Telco in Vancouver, BC to develop their continuous controls monitoring program by assisting to identify data requirements, scheduling of tests, and possible tests based on available data for the Travel & Entertainment and purchase to pay business processes.

„ Managed several large Sarbanes-Oxley 404 and NI-52-109 reviews for clients in Vancouver and Calgary. The scope of the projects includes the identification of key controls, development of testing scripts, QA of documentation, identification and communication of control gaps, participation in status meetings, and remediation recommendations. Areas of testing included network and operating system security, change, and data management, and backup operations.

„ Managed and performed a vulnerability assessment and penetration tests for major mining companies based in Vancouver. Used freeware, shareware, and purchase tools to identify vulnerabilities and then exploit them to show true weaknesses in the IT network.

„ Managed a NERC federal compliance review for a large energy client. The engagement included comparing standards to company policies, identifying and communicating compliance gaps, developing internal reporting standards, defining on-going monitoring efforts, and reporting to legal and management on compliance efforts.