Experienced IT Auditor focused on improving business compliance, workflow and processes through detailed audits and optimization recommendations. Successful track record of fully evaluating information, structures and procedures and initiating corrective actions. Advanced skills in Risk-based audit, Internal Control, Management Directives (policies, standards and procedures), Risk Assessment, IT Application Controls (ITACs), Networks, COSO, COBIT, ISO, NIST frameworks,Business Continuity/Disaster Recovery and IT General Computer Controls (ITGCs), information security audit (incidence management, vulnerability management etc.).
• Establishing IT compliance framework covering the IT platform applications, processes, and procedures to ensure compliance with industry standards and best practices.
• Reviewing and testing users access control - physical access relating to server room or data center, and logical access control relating to various applications, operating systems, database, networks, and windows active directory.
• Performing review and testing IT controls such as incident management, change management, segregation of duties, data integrity.
• Performing review of organizational IT policies, standards, procedures and provides advice on their adequacy, accuracy, and compliance with government guidelines and regulatory requirements.
• Evaluating the organization's disaster recovery readiness - DR plan, business impact analysis (BIA), annual testing, site adequacy.
• Assisting the management in the identification and assessment of technology related risks, reported risk-based controls adequacy.
• Evaluating the technology and business related controls for integrated IT and business auditing efforts.
• Coordinating and executing the projects and ensuring security risks/vulnerabilities are identified, communicated and remediated.
• Measuring the adequacy of the quality of IT service delivery, through the review of key controls in incident management (help desk), problem, and release and change management.
Companies Worked For:
Job Titles Held: