Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic
Brooklynn Blackford

Brooklynn Blackford

Grand Rapids,MI

Summary

Results-driven IT Auditor with expertise in SOX compliance, cybersecurity risk assessments, and control evaluation. Proven ability to deliver actionable insights and enhance governance frameworks.

Overview

9
9
years of professional experience
2
2
Certificates

Work History

Information Technology Auditor

Dow
Midland, MI
02.2022 - Current

Lead and execute enterprise IT and SOX-related audits across complex global systems, supporting cross-functional operations.

  • Perform enterprise-wide ITGC and ICFR assessments, evaluating control design and operating effectiveness across financial and operational systems.
  • Assess role-based access, segregation of duties conflicts, automated controls, and system interfaces to ensure SOX compliance.
  • Evaluate cybersecurity control frameworks, and validate remediation efforts to ensure risk reduction and sustainable compliance.
  • Analyze audit results to determine risk severity, business impact, and remediation priorities for executive reporting.
  • Advise IT and business stakeholders on control enhancements, risk mitigation strategies, and governance improvements.
  • Deliver clear, executive-level reporting on control deficiencies, root cause analysis, and residual risk exposure.
  • Support the continuous strengthening of the enterprise control environment through risk-based advisory consultations.

Staff Auditor

Dow
Midland, MI
04.2020 - 02.2022

Executed risk-based IT audits and SOX control testing, while contributing to enhancements in governance and compliance programs.

  • Assisted in enterprise ITGC and cybersecurity audits, supporting SOX compliance initiatives.
  • Identified control gaps and collaborated with control owners to implement remediation plans.
  • Facilitated documentation, walkthroughs, testing procedures, and reporting aligned with ICFR standards.
  • Partnered with IT and system owners to monitor remediation progress and validate corrective actions.
  • Contributed to strengthening audit methodologies and improving risk assessment processes.

Innovate and Improve Specialist

Dow
Midland, MI
06.2018 - 04.2020

Led system improvement and risk mitigation initiatives within global enterprise applications.

  • Partnered with cross-functional stakeholders to enhance system performance, governance, and internal controls.
  • Gathered and translated functional requirements for global system design, configuration, and testing.
  • Identified root causes of system defects and implemented corrective solutions to reduce operational risk exposure.
  • Supported global implementation of MRO code requests and MDA input tools, ensuring control alignment and system stability.
  • Facilitated design workshops and system testing to improve tool effectiveness and compliance readiness.

P2P Information Systems Analyst

Dow
Midland, MI
01.2017 - 06.2018

Strengthened procure-to-pay system security and operational efficiency across SAP and Ariba environments.

  • Bridged IT and functional teams to enhance system controls and reduce process risk exposure.
  • Analyzed SAP and BW data to support Ariba Network supplier enablement and impact assessments.
  • Executed testing and defect resolution activities to ensure stable system performance post-implementation.
  • Contributed to Project Lion through configuration, testing, training, and deployment efforts.
  • Developed training materials and conducted multi-site user training to ensure control awareness and system adoption.

Education

MBA - Value-Driven Organization

Central Michigan University
Mount Pleasant, MI
04.2021

Bachelor of Science - Management Information Systems

Central Michigan University
Mount Pleasant, MI
01.2016

Skills

Enterprise-wide IT General Controls (ITGC) & IT Application Controls (ITAC) testing

SOX 404 & ICFR program governance, scoping and risk assessment

SOC 1 / SOC 2 report review & third-party control reliance strategy

Control design & operating effectiveness testing (manual and automated)

Segregation of Duties (SoD) risk analysis & access governance

Governance, Risk & Compliance (GRC) platform utilization & risk reporting (SOX lifecycle management)

Deficiency evaluation, root cause analysis & remediation

Access Governance & Role-Based Access Control (RBAC)

Enterprise-wide IT & cybersecurity risk assessments

Risk Management lifecycle oversight, including inherent & residual risk evaluation

Vulnerability management governance, risk scoring (CVSS), and remediation prioritization

NIST CSF & ISO 27001 / 27002 framework alignment

Control mapping & KPI reporting

SAP ECC, SAP BW, SAP Ariba (ERP security & configuration controls)

ServiceNow (ITSM, GRC modules), Workday, Oracle

Cloud environments & SaaS application controls (AWS / Azure exposure)

Certification

TERP10 SAP Certification

Lean Six Sigma Certification

Timeline

Information Technology Auditor

Dow
02.2022 - Current

Staff Auditor

Dow
04.2020 - 02.2022

Innovate and Improve Specialist

Dow
06.2018 - 04.2020

P2P Information Systems Analyst

Dow
01.2017 - 06.2018

MBA - Value-Driven Organization

Central Michigan University

Bachelor of Science - Management Information Systems

Central Michigan University
Brooklynn Blackford