John advises organizations on designing and implementing robust frameworks for IT risk management, cybersecurity, and responsible AI adoption. He is recognized for helping clients navigate complex regulatory environments, develop effective internal controls, and align risk management strategies with evolving technology trends. His expertise spans IT risk assessments, internal audit services, operational policy development, and AI governance, controls and risk supporting clients from mid-market to large enterprises.
John is deeply experienced in both internal and external audit methodologies, including Sarbanes-Oxley compliance, and has a proven track record of guiding organizations through digital transformation and emerging technology risks. He collaborates with executive teams to establish governance models that foster innovation while maintaining security and compliance.
Prior to joining RSM, John held leadership roles in IT audit and risk consulting at both boutique and Big Four firms. He is a Certified Information Systems Auditor (CISA) and Certified in Risk and Information Systems Control (CRISC) and holds a Bachelor of Science in Accounting Information Systems from the University of Scranton.