Jack Paladino

Jack Paladino is a Senior Manager within the firm’s Risk and Compliance Services (RCS) practice and has over 5 years of experience in Sarbanes-Oxley (SOX) Section 404 compliance and internal audit. He works with both public and private companies to identify, assess and mitigate risks – including operational, strategic, reporting and compliance risks – while advising on opportunities to enhance the internal control environment.  Jack serves a variety of clients in the financial services, pharmaceutical and manufacturing industries in varying capacities.  He is responsible for leading projects to develop and implement internal control frameworks that align with SOX 404 requirements and develops test programs to assess the design and operating effectiveness of internal controls.  Jack provides value-added recommendations to his clients to improve processes and optimize controls. 

Jack regularly interacts with client finance, accounting and information technology leaders, as well as with members of the board of directors, audit committees and external auditors, promoting efficiencies and facilitating collaboration throughout each engagement. 

In addition to his SOX compliance experience, Jack is responsible for performing enterprise-wide risk assessments to assist clients in the development and execution of internal audit plans.  His experience in planning and performing internal audits includes areas focused on regulatory compliance requirements of the U.S. Securities and Exchange Commission (SEC) and Financial Industry Regulatory Authority (FINRA).

Jack has experience working on national security related engagements under the Committee on Foreign Investment in the United States (CFIUS) and Defense Counterintelligence and Security Agency (DCSA).  His involvement on these projects has included working as the third-party auditor and third-party monitor, while also assisting clients in readiness activities. 

Jack regularly contributes as an author of firm publications, including “What to Do: Performing and Refreshing Enterprise Risk Assessments” and “What To Do: Performing and Refreshing Fraud Risk Assessments.”