Conduct comprehensive SOX audits, IT infrastructure audits, and business application audits, ensuring compliance with regulatory standards and company policies.
Identify IT-related risks across networks, operating systems, ERP, and databases, providing independent audit support in the company's SOX 404 assessments.
Coordinate and track the remediation of gaps identified in risk assessments and penetration tests, collaborating with internal teams, and third-party vendors.
Lead training sessions for IT and business teams on audit procedures, risk management, and compliance policies.
Conduct periodic reviews of internal IT and compliance policies, ensuring alignment with industry frameworks such as SOX and ISO 27001.
Compliance Analyst
Hikma Pharmaceuticals
Columbus, OH
07.2021 - 06.2023
Performed internal audits of IT systems and processes, ensuring compliance with SOX, PCI DSS, HIPPA, and ISO 27001 standards
Assisted with the design, review, and implementation of internal compliance policies, ensuring they aligned with management directives and industry standards
Led risk assessments, identifying gaps in security posture for network, data, and application interfaces
Coordinated with internal Shared Services teams and third-party vendors to remediate security risks and track compliance gaps
Delivered training on compliance frameworks, audit processes, and policy updates to cross-functional teams, improving overall organizational adherence to industry standards
Conducted SDLC and incident management audits to evaluate risks in system development and operations, ensuring adherence to compliance frameworks
Maintained audit-ready documentation to support ongoing and future IT audits, ensuring transparency and traceability of compliance efforts
Risk and Controls Associate
Creative Financial Staffing
Worthington, OH
03.2020 - 04.2021
Performed IT general controls and IT application controls SOX testing using COSO and COBIT frameworks
Assisted with Operational and Compliance audit processes such as the documentation of management directives - Policies, Standards and Procedures, and internal controls narratives
Performed SDLC and incident management audits to Identify and evaluate risks during review and analysis of the System Development Life Cycle (SDLC) these entail initiation, planning design, development testing, implementation, and disposition of systems Identified and communicated opportunities for improvement in the design adequacy and operating effectiveness of controls
Executed PCI DSS and HIPPA compliance audits using the best practices and methodologies to execute the audits