Jorge Gomez's former employer launched an internal investigation into financial reporting. When it comes to fraud risk management, the buck stops with the CFO, says an expert.