

Results-driven IT Auditor with expertise in SOX compliance, cybersecurity risk assessments, and control evaluation. Proven ability to deliver actionable insights and enhance governance frameworks.
Lead and execute enterprise IT and SOX-related audits across complex global systems, supporting cross-functional operations.
Executed risk-based IT audits and SOX control testing, while contributing to enhancements in governance and compliance programs.
Led system improvement and risk mitigation initiatives within global enterprise applications.
Strengthened procure-to-pay system security and operational efficiency across SAP and Ariba environments.
Enterprise-wide IT General Controls (ITGC) & IT Application Controls (ITAC) testing
SOX 404 & ICFR program governance, scoping and risk assessment
SOC 1 / SOC 2 report review & third-party control reliance strategy
Control design & operating effectiveness testing (manual and automated)
Segregation of Duties (SoD) risk analysis & access governance
Governance, Risk & Compliance (GRC) platform utilization & risk reporting (SOX lifecycle management)
Deficiency evaluation, root cause analysis & remediation
Access Governance & Role-Based Access Control (RBAC)
Enterprise-wide IT & cybersecurity risk assessments
Risk Management lifecycle oversight, including inherent & residual risk evaluation
Vulnerability management governance, risk scoring (CVSS), and remediation prioritization
NIST CSF & ISO 27001 / 27002 framework alignment
Control mapping & KPI reporting
SAP ECC, SAP BW, SAP Ariba (ERP security & configuration controls)
ServiceNow (ITSM, GRC modules), Workday, Oracle
Cloud environments & SaaS application controls (AWS / Azure exposure)
TERP10 SAP Certification
Lean Six Sigma Certification