Senior It Auditor resume example

Review of company’s IT policies, standards and procedures; provide advice on their adequacy, accuracy, modification and compliance with government guidelines and regulatory requirements

Perform SOX Compliance audit, IT infrastructure audit –Operating System, Servers, networks, Database and critical Applications audit.
Review semi-annual access review, assist with IT internal controls risk assessment and walkthroughs.
Perform cyber security audit, testing preventive, corrective, detective and compensating controls to secure organization assets.

Perform Access Management on Sail Point, Change Management, SDLC, Business Continuity / Disaster Recovery, and Application level controls testing.
Evaluate information systems audit projects, including ITGCs testing and IT Application Controls testing, Infrastructure controls -UNIX, information security review in accordance with department and professional standards.
Perform audit interviews with relevant stakeholders to identify inherent risks and control objectives.
Evaluate IT operational processes, standards, controls and procedures, utilizing current and new technologies to improve business performance and technology controls

Performed continuous monitoring by assessing tools during onsite visits to validate the security questionnaires filled out by the vendors to ensure protection of data at the vendor sites.
Conducted on-site risk assessments based on agreed upon procedures guidelines.
Reviewed key vendor-provided documentation such as SSAE 18 Type-II report.
Reviewed information security service level agreements(SLA)
Assessed technological risks in procurement processes.
Reviewed the access control managements on the vendor site.
Assessed areas such as business continuity and disaster recovery, PCI, physical security, system development, operation, access control, incident management, insider threat, security policy
Escalated issues of 3rd party vendor’s non-compliance to the vendor risk management office (VMO).
Planned and executed onsite security/risk assessments for third party vendors.
Performed Data lost prevention analysis of our data at the vendor site.
Validated all controls at the vendor site to ensure there is confidentiality of our data in their custody.
Review all the security policy documentation.
Working with the vendors to ensure risk discovered are remediated within reasonable time.
Performed IT Infrastructure Audit to test default account, vendor update & patches, password setting and unnecessary services running over the applications.
Performed IT general controls testing for Sarbanes-Oxley (SOX) 404 compliance, and Service Organization Control (SOC) reports /SSAE18 (formerly SAS 70).