- Featured in:
Find out what is the best resume for you in our Ultimate Resume Format Guide.
Additional Information Technology Resume Samples
It Auditor Resume Samples
No results found
6-10 years of experience
Promoted to lead 25-member matrix team of indirect reports in full range of quality assurance and control processes and overall quality plan for Enterprise Business Services and Enterprise Operations for global security and aerospace company with 113,000 employees worldwide principally engaged in research, design, development, manufacture, integration, and sustainment of advanced technology systems, products, and services.
- $5 million estimated first year saving realized by leading deployment of leaner effective process.
- Developed process and documentation in support of changing technology including Agile Development, Blade Logic, Cloud Systems, as well as performance, agile, and automated testing.
- Created new SaaS and Operational Model that defines O&M as Service Program that standardized metrics and improved cost modeling by task.
- 18% average improvement gained in schedule performance on first six programs by leading Lean Problem Solving activity and process improvement team.
0-5 years of experience
Responsible for the management and delivery of IT and business process audits to ensure business risks were recognized and appropriately managed before the company was adversely affected. Activities included scoping, budgeting, meeting with process owners, developing testing procedures, audit testing, reviewing staff work, conducting meetings to present deficiencies, writing final report and work papers sign off. Served as liaison to external auditors regarding internal IT audit issues and procedures.
- Designed and conducted marketing spend reviews which resulted in the identification of over $1.3M in non-receivables.
- Performed contract compliance reviews to ensure adherence to payment terms, resulting in the identification and recovery of over $270K.
- Coordinated the quarterly SOX 302 Assessment used by executives to certify and assess the internal controls over financial reporting.
- Established application interface controls to ensure proper reconciliation as part of the SOX program.
- Designed requirements and controls for system development projects – online promotions, project initiation request system and customer billing system.
- Evaluated SAS 70 reports to identify compensating controls for third parties’ deficiencies.
0-5 years of experience
Responsible for the day to day operational management of the department’s data analytics program
- Developed and maintained the analytics application and the associated SQL Server infrastructure, and developed Tableau dashboards to help minimize decision time, saving a total of 2,000 man-hours
- Provided ad-hoc analytics support for IT and Financial audits, and SOX testing
- Created Audit Issue Metrics reports, and Travel and Expense (T&E) reports for senior management
- Performed IT and Financial audits, and assisted with forensic investigations on an as-needed basis
- Developed technical documentation for the infrastructure and Business Continuity Plan
0-5 years of experience
Perform A123 testing, reviews and remediation of associated POAMs (Plan Of Action and Milestones). Participated in Department meeting to present NRCS Status for deliverables and A123 testing.
- Perform Audit Coordination for OIG Yearly Financial Audits by providing PBC, setting up walkthrough meeting and helping NRCS POCs understand requirements
- Perform Audit Remediation of findings from OIG Yearly Financial Audit.
- Coordinated multiple projects, establishes rapport and maintained communication with stakeholders regarding objectives to perform business process mapping and analysis
- Assessed audit and test program and security controls using organization IT Security Policy Handbook and NIST Special Publications to provide information necessary to determine their overall effectiveness.
- Helped the POAM coordination Team with review of deficiencies, milestones reviews, discovery meetings and review of evidence provided for remediation.
0-5 years of experience
Performed IT Audits – Information security, change management, computer operations) for clients from various industries (Commercial and Federal)
- Prepared audit reports detailing results of audits and provided recommendations for remediation, as well as follow up review of corrective action plans CAP
- Developed audit plans and programs, following COBIT and FISCAM frameworks. Set up control matrix based on specific client application needs during planning phase of audits.
- Participated in integrated audits – carrying out ITGC testing in support of financial statements audits.
- Reviewed documentation of clients’ internal controls (both IT controls and business cycle controls)
- Communicated with the company’s external auditors on general computer control related matters and SOX test procedures.
- Reviewed SSAE16 / SOC 1 2 and 3 type II report for financial audit teams for reliance, and trust service purposes
- Experience carrying out Infrastructure testing in Windows, UNIX, and Mainframe environments.
0-5 years of experience
Provided project management and audit services for clients of this large consulting firm. Planned and led complete project life cycles. Worked with clients to determine requirements. Supervised project teams as large as 15 persons. Conducted SOX compliance audits.
- Directed the assessment and remediation of the IT Department at CDC Software to enable successful achievement of SOX certification. Established IT and corporate-level policies and procedures, led remediation efforts, and conducted training.
- Oversaw the installation, configuration, and rollout of Changepoint at LeasePlan USA.
- Managed Oracle Financials development projects at NDCHealth/Per-Se. Supervised development team and improved efficiency by conducting training in project management techniques.
- Led a critical project to separate financial applications and data to support the divestiture of a business unit at NDCHealth.
- Spearheaded NDCHealth’s successful SOX certification and compliance efforts. Conducted IT department assessments, carried out remediation efforts, and presented findings to auditors.
0-5 years of experience
Contributed to team that protected assets of a $9.8B, publicly traded Fortune 500 Company. Worked closely with senior management throughout the company and performed audits that pertained to e-commerce, supply chain, infrastructure, network architecture, business systems, security, fraud, and compliance.
- Effectively managed all audits that included wireless security and infrastructure, e commerce security, payroll processing application, credit and debit card processing system, and penetration testing of network components.
- Communicated project status and results in both verbal and written settings to senior management.
- Identified and protected integrity of evidence during Loss Prevention fraud investigations.
- Developed and maintained strategic relationships between internal audit function and IT organization.
- Established and managed standard IT risk monitoring audit program for Sarbanes-Oxley, Section 302 compliance, and conducted assurance testing in compliance with Section 404.
0-5 years of experience
Lead IT auditor for all SOX IT Security Assessments and Testing of multiple applications, platforms and diverse infrastructure including Wintel, UNIX, AIX, ACF2, LDAP, Tandem, IBM, Client Server, Mainframe, VSAM, Oracle, Sybase and SQL.
- Trained and mentored a three person team to successfully perform the annual SOX cycle auditing that included a 100% increase in efficiency over the previous year.
- Performed in depth analysis on 5 new applications and 15 existing applications to determine testing specifications.
- Maintained all testing requirements, results, deficiencies and action plans in Phoenix tracking tool.
- Developed and maintained SOX testing project management documentation including timelines, due dates, dependencies and resource tracking.
- Performed critical reporting on timelines, expectations and issues as the lead interface to corporate control groups.
- Developed and implemented coordination meetings with internal and external audit teams to influence shared vision.
- Reviewed and advised on external vendor SAS70 reports for third party SOX applications.
0-5 years of experience
Private corporation with various divisions that also manages over 600 college bookstores.
- Performed detailed analysis of monthly inventory capitalization computation for $100 MM division.
- Established and continually updated disaster recovery and general security programs for all operating divisions.
- Built and oversaw fulfillment and bindery services agreements for $100 MM division.
0-5 years of experience
Audit, Risk & Compliance Department (Milford, CT)
- Delivered $100,000 annual savings by providing recommendations to the Disaster Recovery committee.
- Saved $250,000 annually by identifying business travel inefficiencies. Implemented automated exception reports.
- Reduced IT controls by 36 % (from 250 to 90). Managed IT controls framework to comply with SOx regulations.
- Played an instrumental role in the implementation & maintenance of the global SOx & PCI compliance programs.
- Led technology audits in Europe, Asia, North & Latin America. Reviewed management self-assessment testing.
- Composed & issued audit reports for senior management. Provided guidance to junior staff members.
- Trained business users on new process related to SAS70 (SSAE16) reports for outsourced services.
- Repaired relationships with IT executive management, business owners & external auditors.
6-10 years of experience
Started IT audit function.
- Selected and implemented ACL audit software for mainframe and LAN usage.
- Served as staff for the company’s external auditors, reducing the fees charged. Improved efficiency of the audit by extracting financial information from the automated general ledger system.
- Performed claims office audits at nationally dispersed locations.
- Increased claims office audit efficiency by pre-selecting audit samples for each location.
- Performed IT support for integrated audit projects
- Performed IT audits of application systems, operations, and security.
0-5 years of experience
Evaluated the adequacy of internal controls and compliance with company policies and procedures by conducting interviews with all levels of personnel, examining transactions, documents, records, reports, observing procedures
- Wrote audit reports for distribution to management and senior management documenting the results of the audit
- Assisted in recommendations based on independent judgment of corrective action and suggested improvements to operations and reductions in cost
- Assisted in the identification of risks as part of the risk management process, including business continuity and disaster recovery planning
- Provided support to internal and external audit teams as required
- Performed bi-annual security policy review to make sure all information are current with the laws, directives and regulation
- Conducted Business Impact Analysis (BIA) to analyze mission-critical business functions, and identify and quantify the impact those functions if these are lost (e.g., operational, financial). BIA helped to define the company’s business continuity plan and IT internal control audit objective
0-5 years of experience
Performed general information systems control, application, and business process projects and reviews; assessed business risks and evaluated the design and effectiveness of controls for mitigating risks in support of financial statement audits and SOC1 / SSAE 16 / SAS 70 reports.
- Managed IT and business process projects by reporting on client expectations, leading team to engagement plan execution, completion of budget to actual, wrap-up, and client deliverable preparation and reporting.
- Supervised multiple client engagements, which included the development and execution of audit procedures, guidance to team members, review of work products, and performance feedback.
- Performed walkthroughs and tests of controls to assess design and operating effectiveness of the key controls.
- Communicated control deficiencies and process improvement opportunities to client (written and verbal).
- Directed daily progress of fieldwork, informed supervisors of engagement status.
- Collaborated with other team members to plan the engagement, allocate resources, prepare agendas and budgets, lead client meetings, develop timelines, create work programs, define risk assessment, and monitor financials.
0-5 years of experience
Reviewed security and audited web infrastructure consists of ISA servers, Application Center, Cisco Content Switch, firewalls, and Surf Control
- Conducted IT process reviews and improved process control on the 7X24 operations
- Stabilized Corporate Web-Farm environment using hardware and software clustering consisted of multiple Internet Information Servers (IIS) and SQL clustered databases
- Audited and streamlined datacenter operations
- Reviewed and coordinated entire Corporate Disaster Recovery Plan
- Implemented change control process and stabilized the distributed web application
- Audited and secured Oracle and SQL databases, SQL Recovery and Log-shipping
0-5 years of experience
Assisted in the development and planning of the first Sarbanes-Oxley reviews by the Internal Audit team.
- Managed the IT functions related to the Sarbanes-Oxley payroll processing and general computer controls.
- Facilitated meetings comprised of users, development teams, and key IT functions on Sarbanes-Oxley.
- Analyzed key controls of the PeopleSoft Payroll and key Financials modules.
- Developed queries to evaluate the security and table setups within the PeopleSoft HRMS and Financials modules.
- Reviewed the controls of three virtual private network environments.
0-5 years of experience
Assisted in audit planning, creating audit programs and preparing audit scopes
- Performed financial, operational and Sarbanes Oxley compliance audits at the corporate and plant level
- Communicated audit findings and presented recommendations for improvement of data integrity and operations to the auditee
- Coordinated with IT department and external auditors to plan annual Sarbanes Oxley IT testing
- Performed change management, logical access and segregation of duties analysis on Tier 1 systems which include UNIX, AIX, JD Edwards, Mainframe, and Hyperion
- Designed and implemented data analytics within ACL (accounting software) to administer computer aided audit tests & ensure data integrity
0-5 years of experience
Evaluating IT and business processes for effectiveness and efficiency, through obtaining an understanding of and documenting key business processes and internal controls.
- Reviewing internal policies and procedures and existing laws, rules and regulations to determine applicable compliance and the adequacy of underlying internal controls.
- Experience with IT general controls such as access control, change management, IT operations, disaster recovery and platform reviews (Window and UNIX OS).
- Ensured audit tasks are completed accurately and within established time using the applicable frame works such as FISCAM and COBIT.
- Identified Risks associated with IT infrastructure, operations and applications including pre/post implementation audit reviews for ongoing IT projects along with current legacy applications.
- Liaised between in-house managers/IT department and External Financial and Operational Auditors.
- Prepared audit scopes, reported findings and presented recommendations for improving data integrity and operations.
0-5 years of experience
Evaluating IT and business processes for effectiveness and efficiency, through obtaining an understanding of and documenting key business processes and internal controls.
- Reviewing internal policies and procedures and existing laws, rules and regulations to determine applicable compliance and the adequacy of underlying internal controls.
- Experience with IT general controls such as access control, change management, IT operations, disaster recovery and platform reviews (Window and UNIX OS).
- Ensured audit tasks are completed accurately and within established time using the applicable frame works such as FISCAM, COBIT and COSSO.
- Identified Risks associated with IT infrastructure, operations and applications including pre/post implementation audit reviews for ongoing IT projects along with current legacy applications.
- Liaised between in-house managers/IT department and External Financial and Operational Auditors.
- Prepared audit scopes, reported findings and presented recommendations for improving data integrity and operations.
0-5 years of experience
- Established processes and procedures for the test environment.
- Process owner of Change Control for test and production environments.
- Led corrective initiatives that reduced critical production errors by 50% within one year period.
- Audited all critical errors and reviewed root cause and corrective action with all participants involved.
- Created a process for annually reviewing infrastructure teams health by defining risks. Findings fed into the annual operating budget and team objectives.
0-5 years of experience
Worked in partnership with management to obtain agreement to audit results, identify solutions, and assist in the development of action plans.
- Developed client rapport to gain an understanding of the various organizational goals and key business risks.
- Analyzed data and exercised professional judgment to form basis for an informed objective opinion.
- Prepared comprehensive written reports for management detailing audit results, deficiencies, and recommendations.
- Participated and led in the execution of Information technology pertaining to E-Commerce, Oracle 11i, Business Partner access, laptop security and Business continuity. In addition, led SOX audits that consusted of application password controls and Network lease – Application controls
0-5 years of experience
Performed risk based audit methodology from the initial planning phase through to completion and sign off phases.
- Developed audit programs for IT audit project and business processes and recommended process improvement
- Planned and developed information technology audits by understanding information technology objectives, information structure, policies, processes, and internal controls; identifying risk areas; preparing audit scope and objectives; preparing audit programs.
- Worked in coordination with divisional groups to define general controls across the enterprise.
- Assisted control owners in understanding and meeting general controls
0-5 years of experience
Performed risk based audit methodology from the initial planning phase through to completion and sign off phases.
- Developed audit programs for IT audit project and business processes and recommended process improvement
- Planned and developed information technology audits by understanding information technology objectives, information structure, policies, processes, and internal controls; identifying risk areas; preparing audit scope and objectives; preparing audit programs.
- Worked in coordination with divisional groups to define general controls across the enterprise.
- Assisted control owners in understanding and meeting general controls
6-10 years of experience
Developed ACL scripts and DirectLink queries for remote auditing and reporting of domestic and international ERP systems, especially SAP.
- Created ACL queries to pull 100% of financial transactions each quarter for our external auditors, allowing multiple tests from one large source file with guaranteed balancing and integrity from SAP General Ledger to Trial Balance and all subsidiary modules.
- Developed and modified ACL queries and scripts to facilitate repeatable forensic testing and capture fraud, duplicate payments, and accounting control issues.
- Worked on multiple special projects relating to system integrity and accuracy of financial reporting.
- Extracted files utilizing SAP tools and ACL to support and expand the scope of standard financial audits and support the data needs of new financial auditors.
- Trained staff on SAP and ACL features and functionality.
- Supported external auditors and SOX 404 compliance testing.
- Completed scheduled audits utilizing PWC TeamMate audit software.
- Performed interim Controller assignment at a subsidiary and transitioned duties to permanent controller.
0-5 years of experience
Documented and maintained full accountability for facilitating the execution of COBIT Framework, ensuring consistency in COBIT products, compliance implementation, appropriate standards, procedures and controls for information systems.
- Collaborated with staff members to ensure documentation was SOX compliant.
- Successfully integrated all Four COBIT Domains with entire 34 processes creating COBIT4.0 Framework.
- Authored, submitted and updated workflows and narratives of procedures for Change Management and System.
- Collaborated with IT management and SMEs to execute Software Development Life Cycle (SDLC) phases.
- Commended by Freddie Mac’s Manager for completing the SOX project one month earlier than expected.
0-5 years of experience
Performed analysis of company’s risk management policies, procedures and compliance requirements
- Conducted risk assessment and provided recommendations for mitigation design
- Identified operational risks associated with key existing internal controls, IT regulatory compliance and information security
- Constructed general control risk matrix based on COBIT framework
- Prepared management and metrics reports for risk management and IT general controls
- Appraised and evaluated new system designs for IT general controls and assist in implementation of mitigating controls
- Reviewed findings and recommendations with appropriate supervisory staff and administrative officials of the area audited
0-5 years of experience
Gathered comprehensive documentation to reflect competencies in specific information technology areas. Performed interviews, wrote narratives, illustrated business transactions, and gathered exhibits.
- Identified, evaluated, and prepared written reports on the adequacy of internal controls and complex IT related risks. Made recommendations for improvements to existing systems or processes.
- Monitored and assessed corporate disaster recovery and business continuity processes, plans and tests.
- Monitored and evaluated complex, technical software applications in development.
- Lead, developed, maintained, participated and managed ACH, SAS 94 and SAS 70 audit engagements.
6-10 years of experience
Advised and consulted with project teams for new systems development, performing risk assessments, reviewing disaster recovery plans, and analyzing business process controls. Performed general control reviews, reviewed audit results, prepared final reports, and delivered detailed reports and presentations to upper management. As Audit IT Manager, performed all Senior IT Auditor activities and efficiently managed combined team of internal audit staff and consultants. Maintained responsibility for effective management of consulting budget.
- Planned and executed audits for 54 separate county entities, each with different information systems. Managed county-wide audit by treating each agency as an individual business unit.
- Developed and designed monthly security bulletin for monthly distribution to end-users as an educational tool.
- Tested the integrity of major business systems, during annual audits, using Audit Command Language (ACL) software.
- Developed and maintained continuous auditing programs.
0-5 years of experience
Ensured compliance of engaged parties with contracts and established internal policies by examining and analyzing clients’ license agreements, computer operating systems and related documentation; recommended opportunities to strengthen the internal methodology.
- Initiated the opening and closing of various IT audits with the assistance of SmartAudit (SA) software & queries and performed all audits according to compliance plan within required timeframe.
- Analyzed audit data and findings via pivot tables, V-Look Up and various other Excel applications.
- Communicated audit progress and findings by preparing reports and providing information in meetings.
- Tracked costs of products, deal structuring and workflow of information through Salesforce, SharePoint and other internal Contract Resource Management (CRM) systems.
- Met work standards by following production, productivity, quality, and customer-service standards; resolving operational problems; identifying work process improvements.
- Worked closely with the client, License Managers, Sales teams, Legal and other departments in contract negotiation and resolution when necessary.
- Developed junior staff through coaching; supervised and reviewed work papers as prepared by junior staff.
0-5 years of experience
Served as the company’s North American Senior IT Auditor for Las Vegas, NV and Bethlehem, PA properties. Responsibilities included engagement planning, execution of test work, reporting, and coordination of management responses to identified issues.
- Coordinated and executed the IT General Controls (ITGC) audits of Las Vegas and Bethlehem casino properties in support of Sarbanes Oxley 404 requirements
- Developed and implemented a database to automate testing of comps provided to casino patrons in support of Foreign Corrupt Practices Act (FCPA) compliance requirements
- Served as the Audit Service Group (ASG) primary point of contact to the company’s external IT auditors
- Performed IT audits in support of Nevada Gaming Control Board (NGCB) Minimum Internal Control Standards (MICS) and Pennsylvania Gaming Control Board regulatory requirements such as the Annual MICS IT Audit and quarterly access reviews of gaming applications (ACSC, CBS, and IGT sbX)
- Audited key applications (i.e. ACSC, Infinium, Stratton Warren) against security best practices and requirements specified by the company’s compliance department
- Monitored, and assessed appropriateness of audit work performed by third party vendors (Cantor Gaming)
0-5 years of experience
Performed technical evaluations of the Bank’s computing environment and infrastructure to identify risks and controls. Performed testing to ensure confidentiality, integrity, and availability of systems and data and assess management’s design and effectiveness of internal controls (automated and manual).
- Performed information technology and financial integrated audits. Partnered with financial auditors to develop and execute audit procedures in order to achieve a holistic review of the audit entity.
- Evaluated information systems to ensure compliance with federal banking regulations, to include but not limited to Sarbanes-Oxley, Gramm-Leach-Bliley Act, FFIEC, OFAC.
- Developed system and data flow diagrams to document business systems and processes.
- Conducted ‘best practices’ research and provide on-the-job training of staff auditors.
0-5 years of experience
- Participated in planning and executing risk-based audits, assisted in developing remediation documents with process owners. Prepared draft reports for IT Audit Senior Manager.
- Performed security access controls, change management controls, interface controls and application development controls assessments; documented findings and collaborated with process owners in defining action plans for correcting identified gaps.
- Performed assessments of IT operating policies and procedures, backup and recovery plans and related business process documentation identifying control deficiencies.
- Performed General and Logical IT controls reviews; validated SOX key controls to ensure compliance with SOX section 404.
- Performed application controls testing across a wide variety of in-scope applications – SAP, Hyperion and other legacy applications.
- Promoted Senior IT Auditor after Eight Months with the company as IT Auditor.
0-5 years of experience
Lead, organized, planned, and executed trans-global audits. Worked with executive management and audit committee to align audit activities with company strategy and emerging risks.
- Documented and streamlined various IT and IT audit processes for better efficiency and efficacy.
- Performed gap analysis and made recommendations for various audit, accounting and IT centers.
- Provided relevant and business appropriate advice for SOX and FCPA compliance policies, procedures and processes. Lead cross geographical team to ensure global acceptance of policies.
- Designed audit techniques and work papers for: data privacy, ERP security settings, patch management, backup policy, software licenses and other critical IT functional areas.
- Advised on applying lean principles to functional IT projects.
6-10 years of experience
- Audited real estate investment holdings and twice recovered over $1 million revenues associated with real estate investments.
- Led teams to perform audits of insurance operations and field offices.
- Performed audit of IT infrastructure, mainframe and distributed processing systems.
- Implemented a department local area network and automated audit workpaper software to create efficiencies and increase the effectiveness of the department
0-5 years of experience
Planned and conducted audits of Information Security, Change Management, and Application Support areas.
- Lead and provided technical support for application reviews of the Bank’s automated systems.
- Acted as audit liaison to Information Security and Change Management areas and System Development Life Cycle projects.
- Practice of Internal Audit and the Control Objectives for Information and related Technology (COBIT).
- Managed workflow, provided feedback to assisting auditors, and completed audit attentions and other projects within established time and resource constraints.
6-10 years of experience
Responsible for ensuring detailed understanding of IT Systems exists and is communicated to IT and Business Management
- Completed detailed risk assessments of internal IT systems
- Evaluated and consulted on internal IT system design and processes
- Developed and presented recommendations to management regarding the remediation of exceptions identified during risk assessments and design consultation
- Collaborated with senior leaders to communicate results of risk assessments while gathering all necessary approvals and signoffs
6-10 years of experience
Responsible for ensuring detailed understanding of IT Systems exists and is communicated to IT and Business Management
- Completed detailed risk assessments of internal IT systems
- Evaluated and consulted on internal IT system design and processes
- Developed and presented recommendations to management regarding the remediation of exceptions identified during risk assessments and design consultation
- Collaborated with senior leaders to communicate results of risk assessments while gathering all necessary approvals and signoffs
0-5 years of experience
Create project specific risk assessments, audit program, testing procedures for each audit; and document testing results that identify the environments controls and areas for improvement within the corporation’s control structure.
- Tested and reviewed key areas for S1 including firewalls, routers, and encrypted data backups.
- Project managed and assisted in testing both phases of the SOC1 initiative for the large business units of S1.
- Prepare and present written and oral reports to management detailing audit findings, identification of issues, and recommendations for process improvement.
0-5 years of experience
Developed and executed operational audits of various business areas using risk-based audit methodology.
- Systematically prepared documents and assembled financial statements for independent auditors.
- Tested the design and effectiveness of internal controls by completing operational reviews of complex business processes.
- Performed SOX compliant audits in multiple business areas.
0-5 years of experience
Participated IT audit walkthroughs of various business areas in identifying General Computer Controls of applications, operating systems and databases.
- Created test scripts of audit walkthroughs and tested results.
- Ensured walkthroughs are tested with the highest quality and consistency.
- Reported to management of IT audit results of work performed, including recommendations of deficiencies identified.
- Facilitated use of technology-based tools and methodologies to review, design and implement products and services.
0-5 years of experience
- Performed IT Assurance & Advisory evaluations (including IT Risk Analysis, IT governance and Effectiveness, IT Security Reviews, IT SOX Control Reviews, ERP implementations, and Information Analysis) for clients in various industries
- Identified mitigating controls for IT-related business risks
- Developed and Communicated Findings and Recommendations reports
- Supervised and Coordinated the work products across international teams
- Performed system reviews for numerous operating systems and databases
- Delivered projects under budget and on time.
0-5 years of experience
- Performed risk based audit methodology from the initial planning phase through to completion and sign off phases.
- Planned and developed information technology audits by understanding information technology objectives, information structure, policies, processes, and internal controls; identifying risk areas; preparing audit scope and objectives; preparing audit programs.
- Worked in coordination with divisional groups to define general controls across the enterprise.
- Assisted control owners in understanding and meeting general controls
- Ensured that continuous, weekly, monthly, and quarterly controls are operating as intended.
6-10 years of experience
- SAP Project Manager in a Regional SOD project including Colombia and Perú for the world largest beer company. Redesigned the security model including the definition, design and construction of the security roles within SAP for the regional solution.
- Designed and implemented an SAP security model for R/3 and BW systems for ExxonMobil.
- Rolled out business process improvement tool kits, process model repositories and templates.
- Educated staff on the benefits of process modeling to produce change.
- Acted as Trainer and Coach of SAP Security Best Practices Implementation within E&Y and clients.
0-5 years of experience
- Interfaced with all levels of management to ensure that risks are quantified and mitigated; and in line with corporate governance risk assessments
- Performed risk assessment, planning and scope development for engagements
- Provided recommendations and guidance on solutions to improve business processes and internal controls
- Responsible for direct supervision of two staff. Developed and trained staff on the audit approach
- Enhanced current audit program templates to include new corporate standard for Incident/Problem & Capacity Management.
- Documented and presented the IT auditors survival guide and how-to documentations for new IT and Financial interns
0-5 years of experience
- Drafted and modified audit test plans for the following: o Databases (Oracle, MS Access)
- Executed audit tests for the following: o Oracle (versions 8, 8i and 9i)
- Drafted final reports for corporate Audit Committee review
- Performed Quality Analysis review for application-level IT-centric Sarbanes-Oxley tests prior to submission for final report creation.
0-5 years of experience
- Inspected and provided sign-off of more than 130 SOX level 1 system requirements and user
- Ensured quality assurance of testing methodology within IT Financial Shared Services.
- Presented all SOX non-compliant findings to management and application technical leads.
- Provided coaching on how to capture test evidence for external SOX IT Audit.
0-5 years of experience
Performed full scope IT audits of various applications hosed on mainframe, AS400 and UNIX servers.
- Conducted detailed reviews of user access controls utilizing IBM RACF.
- Performed SDLC audits for applications development.
- Utilized audit software to perform systems emulation testing.
- Conducted application reviews including interface testing for large processing environments.
- Also performed data center and telecommunications audits at various facilities.
0-5 years of experience
Understood and analyzed business processes across various industries, including Electrical, Manufacturing and Insurance
- Review focus on logical security and program change control, as well as computer operations controls ranging from environmental safeguards in place in the Data Center to Backup and Recovery Procedures.
- Performed SAS 70 walkthrough and testing of IT General Controls, Application Controls and specific controls related to the area of business.
- Performed SOX 404 Audit of IT General Controls, Application Controls and specific controls related to the area of business.
- Identified risks and compensating controls in support of Type II SAS 70 Pre-assessment work
- Advised the client’s upper management on effective design, implementation and testing of IT financial controls
- Conducted configuration analysis, as well as, test technologies, including UNIX, Windows and SQL
- Responsible for maintaining all the Primary Control Procedure (PCP) documents for various Operating System environments.