Evaluating the risks of the future
Practical lessons in audit, risk, and control strategy, told from the field and the road
John Biersmith
I’m a recovering auditor enjoying the life on the other side of the audit
After a long time, I just wanted to write about my learnings from them, experiences now, and what I think of the world to come. Please subscribe for more from me.
My Socials
Follow me on Linkedin and X for additional content.
Helping Businesses Manage Risk | Developing The Team of the Future
Curious about risk. Obsessed with what’s next.
about me
Glutton for audit workpapers, lover of risk and control strategy
Auditor
Spent 10 years as an IT Auditor where I managed some of the most unique scenarios, wrote firm-wide guidance, and led trainings.
Defender of the 1st Line
After auditing, I took a role (over time) in defending the 1st line and supporting the auditor.
Traveler
I have had some incredible experiences that I hope will continue and looking forward to sharing
I help teams make risk and audit work simpler and more useful. Most of my time has been spent building SOX programs, tightening control design, and turning messy data into something leaders can trust.
Lately I’ve been hands-on with modern tooling like Databricks, Delta Lake, and lightweight automation for monitoring. The goal is always the same: clear ownership, better evidence, and fewer last-minute fire drills at close.
Audit Explorer is where I write down what works, what doesn’t, and what I’m still learning. Some posts come from the field, some from tinkering with data, and a few from travel that gave me a better way to see a problem.
Still wondering about a control, a risk, or a route through Milan? I’m all ears, reach out!
John’s work
John has been recognized internally and externally for the work that he has performed, the strategy he has created, and the team he has supported.
Winner of the “Peak” award at T-Mobile
Won the top 1% award at T-Mobile for risk and control strategy and project management of the biggest initiative at T-Mobile.
Recovering Auditor That Makes a Difference
My goal is to work as one team, together always to ensure that we are all successful in our day-to-day and have the added perk of working with incredible people.
Giving back has always been
extremely important to John.
Understanding the complex evolving world while layering operational and financial risk considerations.
Leading-edge of Technology
Risk Management
Team Growth
Future-proof Risk Methodology
Navigating risk with strategies that adapt as fast as the world changes.
Method
We combine proven risk frameworks with agile principles, focusing on practical steps that align controls to real business outcomes, not just compliance checkboxes.
Tooling
Leveraging platforms like Databricks, modern BI tools, and automation for control monitoring, we design environments where data lineage, governance, and reporting are built in from day one.
Outcomes
Stronger decision-making, clearer accountability, and risk programs that evolve alongside emerging technologies and market shifts.