cyber security analyst resume example

• Developed lessons-learned database to improve work processes and knowledge-sharing for 40 auditors.
• Created a 10-point cloud security checklist to ensure cloud service providers can meet current and future business requirements.
• Increased audit efficiency by 30%, by creating matrix to match team members to Subject Matter Experts (SME) to improve fieldwork efficiency.
• Reviewed readiness assessment templates for system development projects to determine implementation readiness and support strategy.

Single point of contact for SOX 404 compliance testing for the whole organization;

• Scheduled weekly meetings with external auditors and sector managers to address potential issues and discuss remediation plans.
• Presented audit results to management teams, delivering information in non-technical terms for easy understanding.
• Saved 20k in external audit fees by independently testing SOX controls to ensure compliance.

Performed Operational Readiness Assessments (ORAs) to identify potential risks prior to implementation of various projects.

Scrutinized 30 administrator accounts, ensured least privilege and separation of duties

• Assisted with the development of an Intellectual Property database to identify, monitor and track 300+ intellectual property to reduce exposure of Intellectual Property.
• Coordinated all phases of audit activities including scheduling, scoping, budgeting, fieldwork, including drafting and issuing audit reports to senior management.
• Reduced fieldwork level of effort by 30%, using flowcharts to facilitate an understanding of business processes, control points and risk areas.
• Developed policies and procedures to ensure confidentiality, integrity, and availability of IT systems
• Performed the first Health Insurance Portability and Accountability Act (HIPAA) audit, discovered vulnerabilities that may have been exploited if they were not remediated immediately.
• Developed Information Security policy to establish authorized access management and authenticator management for internal and third-party personnel.
• Led review of Third-Party Access, to evaluate the design and operating effectiveness of controls related to non-employee onboarding and access to critical systems
• Revised the New Employee On-Boarding Process for the audit dept,, enabling new hires to be engaged early and contribute to the team more quickly.
• Trained 15 new auditors to develop audit programs, lead audits and communicate results to management.
• Performed risk assessment analysis for IT changes, upgrades, and patches
• Accessed risks and control requirements on newly deployed systems and emerging technologies.
• Reviewed the Disaster Recovery Plans and Business Impact Analysis (BIA) to ensure business continuity