IT auditor professional with 5+ years of progressive experience developing and implementing security solutions in a fast-paced environment. Demonstrated skill in identifying business risks, and compliance issues and designing proactive solutions. Skilled in planning and executing audit testing and delivering quality audit services to clients.
Overview
5
5
years of professional experience
Work History
Information Technology Auditor
KPMG
04.2022 - Current
Conducting IT general control audit, application control audit, and IT infrastructure audit using application frameworks such as COBIT, COSO, SOC, SOX, NIST, PCI-DSS, HIPPA, and HITRUST
Performing and executing IT general controls testing to ensure compliance with the Sarbanes-Oxley Act (SOX)
Overseeing IT operations exceptions, which involves providing guidance on their creation and ensuring they are addressed until closure
Assisting in the development, execution, and supervision of measures to maintain the confidentiality of data, ensure system reliability, and implement recovery procedures
Conducts regular IT security audits and assessments to identify weaknesses, gaps, and non-compliance issues
Developing IT risk control matrices to identify vulnerabilities in IT systems and recommend risk mitigation controls
Performing infrastructure audits, information security, system development, change management, business continuity, and disaster recovery
Collect, document, and review evidence during the control testing process
Performing monitoring activities to evaluate the design and operational effectiveness of controls pertaining to databases
Plan engagement to address the audit risk, develop a test plan including knowledge of sampling standards, and execute testing through the final report
Perform periodic segregation of duties (SOD) on multiple scope applications to make sure all active employees are given and using the appropriate access within their roles
Information Technology internal Auditor
Blue Shield of California
02.2018 - 03.2022
Collaborated with IT audit team management and colleagues to carry out advisory projects and comprehensive risk evaluations using a range of frameworks and standards such as COBIT, COSO, HIPAA, and PCI-DSS
Assisted the finance team in performing SOC 1/SSAE16 testing and documentation
Examined SOC 1, SOC2 type 1, and 2 reports by delivering extensive fieldwork and documentation
Provided measurable input into new processes, standards, and operational plans that impact audit service
Examined sets of data to generate a suitable sample for auditing purposes
Worked simultaneously with business owners and IT stakeholders to identify and evaluate risks, establish mitigation, and control plans, and understand the cross-functional impacts of IT controls
Communicated audit results, audit recommendations, and other key messages to relevant stakeholders in a concise and timely manner
Managed large, complex project initiatives of strategic importance to the organization, involving large cross-functional teams
Participated in the preparation and implementation of audit projects focused on IT infrastructure, including servers, databases, and firewalls
Assisted with developing and implementing policies and procedures related to internal controls over operational control reporting