IT Audit Manager Resume Examples

Managed all aspects of IT audits reviewing information security, computer operations, and application change controls. Conducted tests of IT controls regarding SAP, PeopleSoft, Lawson, UNIX, Windows, OS/400, Oracle, and DB2. Communicated with executive management to review audit results, negotiate findings, and create final audit reports.

Provider of electrical, engineering, and automation products/solutions to global industrial, manufacturing, and construction clientele including systems integration, technical services, and turnkey industrial systems.

Responsible for the management and delivery of IT and business process audits to ensure business risks were recognized and appropriately managed before the company was adversely affected. Activities included scoping, budgeting, meeting with process owners, developing testing procedures, audit testing, reviewing staff work, conducting meetings to present deficiencies, writing final report and work papers sign off. Served as liaison to external auditors regarding internal IT audit issues and procedures.

Developed the IT audit program including establishing key relationships, assessing risk, creating the audit plan, conducting audits, and reporting results. Assessed and reported PCX options exchange and Archipelago electronic stock exchange compliance with SEC regulations concerning security, penetration testing, capacity, stability, and IT general controls.

Assisted senior management in development of IT risk assessments and corresponding audit programs. Developed and executed audits over the company’s IT operations and security functions.

Managed and performed IT audits, Sarbanes-Oxley (SOX) and PCI DSS compliance testing for Systemax’s operating companies based in New York, Miami, Hungary (including seven additional European companies) and India.

Provided audit coverage over the IT infrastructure and business applications. Performed detailed application audits for Oracle Financials, SAP, data center reviews, and technical audits including DB2, CICS, RACF, UNIX, Windows, and Oracle resulting in positive impacts on the control environment, operating performance and cost structure. Managed, trained, and mentored three IT auditors.

Simultaneously managed from 3-5 audit teams who performed Sarbanes-Oxley testing for a global bank.

Delivered accurate IT Audits, IT consulting, and SOX compliance oversight. Performed risk assessments for information technology systems, identified general controls, and provided crucial internal technical compliance auditing for Sarbanes-Oxley 404 standards for healthcare, manufacturing, and banking clients.

Performed internal review of information security practices and was responsible for the following areas: ArcSight change / incident management, threat / vulnerability practices, information security reporting (functional and executive), and information security governance practices.

Led and participated in consulting engagements with commercial banks in providing services in IT risk and control.

Assisted companies in Internal IT Audit and Sarbanes-Oxley testing and documentation

Developed Audit Plans & Reports, examined application systems, servers, microcomputer controls, data and network security, and disaster recovery.

Responsible for developing and implementing a comprehensive audit program of data processing operations, including detailed functional and installation reviews, application audits, and systems development life cycle engineering compliance.

Performed IT audit assessment including LAN, WAN, servers, routers, websites, firewalls, databases, and enterprise applications. Provided information risk strategies for clients including Wells Fargo, CalPERS, Netscape, NEC, and the GAP.

Performed annual technology risk assessments and produced annual technology audit plans.

Managed numerous IT Audit Engagements from risk assessment through audit plan development to execution and remediation coordination.

Managed numerous IT Audit Engagements from risk assessment through audit plan development to execution and remediation coordination.

Developed and maintained IT audit plan and updated Audit Director on audit execution

Managed global IT audit team

Collaborated with the Information Technology (IT) Audit Director and other members of the audit team of seven to perform the IT Audit plan, allocate resources, supervise staff members and prepare reports for Executive and Senior Management and, the Audit Committee. Performed annual risk assessments identifying strategic audit opportunities valued by senior management.

Performed all functions of IT auditing for General Computer Controls audits, Integrated audits, Sarbanes-Oxley and SAS70 (SSAE16) reviews. Functions included assessing risk in individual and integrated settings; developing, revising and communicating audit memo; developing and documenting narratives for processes to review controls; creating and executing test scripts of controls which included testing of derivatives; review and document findings; devise and make recommendations to remedy findings; retesting of controls to ensure that findings were remediated and drafting and proofing audit memos and reports using ISO, COSO, COBIT and internal methods of clients across various business lines which included Operations, Trading Floors, Project Management, System Implementations, as well as IT divisions.

Responsible for managing Corporate internal audits utilizing the Ally Audit Methodology by planning the audit strategy, resource allocation, fieldwork testing and reporting using project management techniques

As leader of the IT compliance team with a regional professional services firm, provided SOX consulting to software and semiconductor companies. Deliverables included risk analysis, control rationalization, and testing.

Sarbanes-Oxley work executed – SOX compliance audits for IT, payroll, treasury, expenditure, inventory, revenue, finance cycles – polish and US clients

Hired as AVP. Promoted to VP in six months and to First VP 12 months later.

Developed and led the execution of the annual risk assessment, audit plan and audit approach utilized for the Federal Trade Commission compliance audit as required by the FTC Settlement Order dated February 16, 2006.

Manage the IT Audit function for the newly spun-off entity that was the result of the split of [company name] and Leidos in September 2013. Relaunch audit function, which includes hiring and training resources to perform IT Audits. Developed Annual IT Audit Plan and contributed to annual risk assessment and overall Internal Audit Plan. Manage IT Audit Staff to completion of key milestones of annual SOX Testing.

Lead engagement manager on a large commercial truck manufacturer, responsible for managing project metrics, scope, budget, timelines and issues. Reported status to managing partners and key client contacts via written and oral presentation. Effectively managed budget that ranged between $3 to $5 million over 3 years.

Responsibilities have included conducting all phases of audit planning and execution for technology, security, operational and financial audits in both domestic and international operations, performing information systems controls and technical reviews, SOX 404 readiness assessment and testing, participation on numerous teams and projects involving information technology and security matters, in addition to recruiting, coaching and mentoring an internationally dispersed team comprised of 25 individuals. Responsible for developing and implementing the IT audit universe and risk identification process. Managed and participated in audits in the areas of [company name], Risk Management and General Controls, Consumer Health and Pharmaceutical Sales & Marketing, Human Resources and Payroll, Purchase to Payment, Revenue, and Accounting and Reporting. Technologies covered: UNIX, AS400, Windows, Internet/Intranet, Firewalls, Routers, Switches, Wireless, and application reviews, SAP, PeopleSoft, etc. Audits were conducted to ensure compliance with FDA and HIPAA regulations.

Managed service delivery to Aegon Information Technology – manages Transamerica’s computing infrastructure including data centers, network and disaster recovery.

Manager Oracle Consulting Services, Human Resource and Payroll, Payroll Tax Consulting Services.

Trained and supervised Information Technology audit staff.

Responsible for planning, performing and managing Sarbanes-Oxley Section 404 Information Technology and financial audits for multi-division manufacturing company both domestically and international.

Co-ordinated and managed end to end business/IT audits within Cisco. As part of the audit interviewed senior management and business process owners to identify major risks. Created AS IS process maps to identify critical IT/Business controls. Led the initiative to identify root cause and presented alternative recommendations. Documented and discussed the results, action items, and recommendations with senior management.

Plans, manages, and leads both IT and integrated audits, primarily focused on pre and post-implementation reviews of key systems and processes, for one of the world’s largest commercial property and casualty insurers with operations in 54 countries.

Led and trained a global IT audit team on various risk-based IT and security audits

Managed complex audit projects focused on technology risk to support the Mortgage and Consumer Banking lines of business.

Performed IT audits of North American, Asia/Pacific and European business units.