Vanessa Mirabeau

• Corporate Audit – Control for System Implementation for five years and moved to Technology Audit.
• Abided by Regulations: GDPR, CCPA, NYDFS, NAIC, NY SHIELD, HIPPA
• Compliance Frameworks used: COSO, NIST, ITIL, ISO, and PCI
• Operated under Agile and Scrum frameworks as Senior in Charge and supervised staff.
• Technology Audits Focus areas include, but not limited to, Asset Management, Data Management, Risk and Compliance Management, Security, and IT Operations & Service Delivery.
• Documented various deliverables, including system flow, memos, observations and compensating controls
• Review and evaluate test plans and test results with the business and IT team to ensure key controls and system functionality were sufficiently tested
• Performed and evaluated post-implemented testing for new systems to ensure key controls are functional as intended; this includes leading walkthrough meetings, obtaining documentation of evidence, and communicating the results
• Worked with the project team during the System Development Life Cycle (SDLC) process to recommend and document controls in areas that include data conversions, data access and security, validation and processing, reporting and change management
• Conducted various meetings (e.g., kick-off, control verification, and observations) with the project team during the SDLC process
• Completed pre-implementation testing for new system modifications to assess potential impacts.
• Skilled at working independently and collaboratively in a team environment.
• Worked well in a team setting, providing support and guidance.
• Managed time efficiently in order to complete all tasks within deadlines.

External/ Internal Audit

• Worked closely with the Vice Presidents and Directors to understand and document their Inventory Management , Cost Allocation process, and Key Financial Reports
• In-Charge/Team Lead for external and internal audit co-souring/outsourcing arrangements in the financial services sector, working in coordination with the Grant Thornton Advisory practice
• Performed reviews of vendor management, segregation of duties, change management, financial application control effectiveness, and assisted with the development of the IT security roadmap
• Developed audit programs, including documentation of risks statements, IT application controls and requirements

Attestation

• In-Charge/Team Lead for a wide range of Service Organization Controls (SOC) Type I and II engagements
• Define and document business processes, control objectives, risks and controls and perform tests of design and operating effectiveness
• Evaluated the impact of identified deficiencies on the financial statements

• Evaluation of internal controls, communications, risk assessments, and maintenance of documentation, as it relates to compliance
• Document various deliverables, including process flows, narratives, and control matrices
• Identify risk and evaluate deficiencies while working with internal departments/business units to appropriately remedy them and implement best practice for control systems within the company