Summary
Overview
Work History
Education
Skills
Objectives
Timeline
Generic

Brianna ​ Thomas

Dallas,TX

Summary

Experienced Auditor focused on improving business compliance, workflow and processes through detailed audits and optimization recommendations. Successful track record of fully evaluating information, structures and procedures and initiating corrective actions.


Overview

4
4
years of professional experience

Work History

I.T Auditor

DTCC
, TX
01.2019 - Current
  • Review Information Technology General Controls (ITGCs) testing and IT Application Controls (ITAC), aligning with COBIT and COSO frameworks to verify control design adequacy and operating effectiveness
  • Interpreted state and federal laws, accepted auditing principles and procedures and program standards to audited materials and data to detect non-compliance and facilitate recommendations.
  • Execute PCI and SOX compliance audits, testing controls in place for appropriateness, and document audit results in form of a working paper and present same to appropriate control and process owners
  • Conduct information security audit reviewing preventive, detective, corrective, and compensating controls for appropriateness and operating effectiveness
  • Conduct risk assessments on various business and IT application processes to verify control adequacy and operating effectiveness
  • Identify control gaps in processes, procedures, and systems through in-depth research and assessment and suggest recommendations for improvement.
  • Conduct various walkthroughs and detailed testing to verify control adequacy and operating effectiveness
  • Create an audit work program that enables adequate capturing of high and medium risk, with proper evaluation of controls implemented to mitigate each
  • Administered auditing program to address risks and evaluate compliance with regulatory requirements.
  • Execute all audit projects on a risk-based approach to effectively test and identify control weaknesses and issue appropriate recommendations that leads to timely and effective remediation
  • Perform Cloud computing audit testing encryption, availability, integrity, confidentiality, compatibility, and security access controls
  • Test key internal controls for design adequacy, operating effectiveness, and business processes
  • Prepare status reports to communicate audit results and timeline to internal audit senior management and auditees alike
  • Conduct SOC 1, 2, and 3, SOC 1 Type I audits, review SOC 1 Type II and SSAE18 reports
  • Conduct IT infrastructure control testing, Operating Systems, Network Devices, databases, and Servers for control design adequacy and operating effectiveness
  • Develop a professional working relationship with the management key personnel and colleagues
  • Conduct gap analysis on management directives – policies, standards against leading practices
  • Effectively communicate audit findings to senior management, application owners, and relevant stakeholders through detailed reports and documentation
  • Manage multiple tasks independently to meet deadlines.

Education

Bachelor of Science - political science

University Of Ibadan
2017

Skills

  • Excel, Word, Access, PowerPoint, Outlook Express, Microsoft SQL Servers, Acrobat Reader, V-lookup, TeamMate, SharePoint, Splunk and Nexpose
  • Risk mitigation strategies
  • Debt management
  • Accounting principles

Objectives

COSO, CObiT, NIST, ISO, ITIL, FFIEC frameworks, including - SOX testing & PCI DSS, ITGCs, IT application controls (ITAC), and IT infrastructure audits, SOC 1, 2 & 3, SOC 1 type I, SOC 1 type II, SSAE 18 review, Information Security and Cloud Computing Audits..

Timeline

I.T Auditor

DTCC
01.2019 - Current

Bachelor of Science - political science

University Of Ibadan
Brianna ​ Thomas