John Martorella

John Martorella is an Audit Director in the Assurance and Technology Control Services Group, with over 30 years of internal IT audit and hands-on IT experience. He is a cyber and information security, IT applications and general controls specialist, with global expertise in technology risk management and assessment, information protection, compliance and audit.

John serves as a SOX IT external auditor for several accelerated filers, in addition to an IT internal auditor for many other clients. He has also performed PCI risk assessments, and has been engaged by clients as an acting compliance officer (for a publicly traded media and technology firm).

John has spent approximately half his career in information technology and was chief information security officer at two major New York City hospitals. He received an outstanding contributor award for his role in an Access Control Facility (ACF2) to Resource Access Control Facility RACF data security rules migration and was one of the first Banyan and Novell Local Area Network Administrators at a major financial firm.

Additionally, John started a small audit department at an investment management firm and the IT audit function at a municipal hospital network. He has also taught Management Information Systems classes to graduate students at a local university.