Experienced professional with over 6 years of experience in multiple areas of Business Risk, Compliance, and IT Audit. Adept at identifying, evaluating, and mitigating operational risks across diverse financial/IT services environments. Proficient in developing and implementing risk management frameworks, performing thorough risk assessments, and ensuring compliance with regulatory requirements. Demonstrates strong analytical skills, attention to detail, and the ability to lead cross-functional teams.
Overview
10
10
years of professional experience
1
1
Certification
Work History
IT SOX Audit Lead
LANOS LLC
01.2023 - Current
Oversee the annual SOX compliance process including scoping, risk assessment, control design, and testing
Lead and perform extensive IT SOX reviews of business processes to ensure appropriate controls and procedures are in place and operating effectively
Work with external auditors and coordinate SOX efforts between the SOX department, SOX stakeholders and external audit
Support the execution and implementation of the IT SOX programs with an eye for process improvement
Develop and maintain SOX documentation such as risk and control matrices, process flowcharts and test plans
Perform testing of IT general controls (ITGC) and application controls (ITACs) to assess their design and operating effectiveness
Identify control deficiencies, recommend corrective actions and monitor remediation efforts
Provide guidance and support to team members in performing audits and assessments
Lead Business Execution Consultant (Contractor)
CENTER FOR DISEASE CONTROL AND PREVENTION
12.2020 - 12.2022
Completed Annual Risk and Control Self-Assessment (RCSA) refresh activities to provide SME support to maximize effectiveness
Participated in identifying, assessing, managing, and mitigating current and emerging risk exposures within the Control Management functional areas
Coordinated RCSA evaluations of risks and controls and facilitated working sessions with business owners
Supported the development of working templates, key documentation, playbooks, and engagement models
Managed agenda, timelines, meetings, share and apply lessons learned
Managed timely QA/QC submissions, handoffs, support feedback implementation and disposition feedback
Supported Annual re-fresh schedule and roster management, status reporting, level of effort monitoring and R&CB scheduling
Pre - populated and mad live edits in Risk Control Self-Assessment (RCSA) Workshop Tool/ServiceNow based on refresh discussions
Lead IT Auditor/Risk Compliance (Remote)
UNIVERSITY OF TEXAS RIO GRANDE VALLEY PUBLIC HEALTH OFFICE
09.2020 - 09.2022
Led teams and provided hands on assistance for all aspects of both IT and Financial Internal Audit engagements including risk assessments, process documentation, and testing of internal controls
Evaluated processes to determine adequacy of controls (application and financial controls), compliance with policies and procedures, and opportunities for automation of testing
Performed specific audit procedures, tests, and analysis, including those that related to Sarbanes- Oxley compliance using automated tools
Executed audit documentation techniques including key risks and controls alignment to audit test objectives and conclusions
Provided assistance to external auditors and regulators in the execution of their duties where required
Led the follow up process to facilitate the documentation and resolution of audit issues and ensure process and control improvements have been timely implemented
Lead IT Compliance Specialist
CITY OF DALLAS
08.2019 - 08.2020
Spearheaded the development and implementation of the company's compliance program, focusing on
Conducted comprehensive risk assessments to identify potential compliance risks and implement mitigation strategies
Oversaw compliance audits and internal reviews to ensure adherence to regulatory standards and company policies
Designed and delivered compliance training programs for employees at all levels to promote a culture of compliance and ethical conduct
Collaborated with senior management and legal teams to address and resolve compliance issues and implement corrective actions
Led a team of compliance professionals, providing guidance and support to ensure effective compliance management
Monitored regulatory changes and updated compliance programs and policies accordingly
Prepared and submitted regulatory reports to ensure timely and accurate compliance with reporting requirements
Participated in internal investigations and prepared reports on compliance issues and findings
Monitored and reported on compliance activities, ensuring alignment with regulatory requirements
Assisted in the assessment of technology-related compliance issues including information security, identity management, user access, and data integrity
Prepared compliance reports, identified issues and report to the department
Lead IT Auditor & Compliance Specialist-Parks Department
CITY OF LEWISVILLE
06.2018 - 06.2019
Led teams and provided hands on assistance for all aspects of both IT and Financial Internal Audit engagements including risk assessments, process documentation, and testing of internal controls
Assisted with project management for several IT technical daily operations and audits in parks
Evaluated processes to determine adequacy of controls (application and financial controls), compliance with policies and procedures, and opportunities for automation of testing
Performed specific audit procedures, tests, and analysis, including those that support regarding Sarbanes- Oxley compliance using automated tools
Executed audit documentation techniques including key risks and controls alignment to audit test objectives and conclusions
Provided assistance to external auditors and regulators in the execution of their duties where required
Led the follow up process to facilitate the documentation and resolution of audit issues and ensure process and control improvements have been timely implemented
Proactively identified audit and compliance access related issues to reduce the risk of security exposures on the support systems and worked with various teams to implement the improvement
Documented access management procedures for assigned applications and/or platforms and kept all access
IT Auditor- Resource Development
UNITED WAY OF DENTON COUNTY
10.2017 - 05.2018
Assisted in the development and implementation of thorough and comprehensive Quality Control/Assurance procedures, to ensure that the team meets and exceeds all the expectations of the client
Performed assessments of IT internal controls as part of financial statement audit, Internal and operational audits, Attestation engagement, and Audit readiness
Led and championed agile stand-ups meetings weekly, to ensure all deliverables are achieved
Implemented risk assessment to support internal audit department management in creating risk-based audit plans
Evaluated IT general controls (ITGC) including information security, change management, data center and physical security; disaster recovery and systems development life cycle (SDLC)
Conducted and supervised end to end IT audit process including engagement planning, coordination, scope determination, risk and control identification, design of audit program, procedures, test control and evaluate results
Performed IT General and Application controls testing and walkthroughs as well as functional Segregation of Duties Review for applications supporting business processes and systems to ensure security risks are appropriately addressed by implemented controls
Worked both independently and across teams to collect evidence to facilitate IT SOX testing
Improved performance management and increased employee engagement by standardizing system across departments
Conducted walkthroughs, developed test plans, testing procedures and documents test results, and exceptions
Conducted the review of computer operations, data integrity testing, segregation of duties, access control, audit log, enabled services, remote access control, application-level security, and environmental control around the data centers
Conducted IT risk assessment; document related risks and note key control issues; develop appropriate audit centers programs to test the control risks identified and subsequently evaluate control designs, optimization, and assurance over operational and compliance processes
Implemented reviews on IT business operation, infrastructural security, data migration process, business integration and process integrity
Conducted risk evaluation by examining related risk, key controls and developing appropriate audit measures to test control identified
Involved in carrying out risk assessment and evaluation for the organization and recommend possible solution to any findings
Conducted audit interviews and assignments, reviewed work papers and reports, documented, and analyzed audit evidence
Assisted in the execution of the annual internal audit plan as directed and prepared reports to communicate audit results to management and made recommendations as appropriate
Performed and documented audit activities in accordance with professional standards such as COBIT and COSO framework
Reviewed medical records to help inform decisions and gather information for audits involving health conditions in the company database for patients
Education
Master of Science - Health Sciences
TEXAS WOMAN'S UNIVERSITY
Denton, Texas
Bachelor of Arts - Psychology
FLORIDA INTERNATIONAL UNIVERSITY
Miami, Florida
Skills
SAP SQL Database FFIEC ISO 27000 27001 27002 NIST Metric stream Rally UNIX NetSuite Windows Server IDEA ISOX ISAE Oracle Database GRC Archer SOC 1 SOC 2 SOC 123 Aurora Peoplesoft LINUX Network Systems Cybersecurity Azure Microsoft office suite (Word, PowerPoint, Visio, Excel) Data analytics HIPPA GBLA AML BSA ADA Reg B Reg D FCPA SCRA UDAAP FedRAMP OFAC PCI Oracle database Agile methodology COBIT Share point-based system Service Now Audit board, Use of automated scripts Teammate Audit command language (ACL)