Results-oriented IT Audit, Risk, and Compliance professional with over five years of comprehensive experience in conducting audits, identifying risks, and enhancing compliance frameworks. Proven track record in risk assessment, internal controls evaluation, and the development of compliance strategies that align with organizational goals. Adept at collaborating with cross-functional teams and communicating complex issues to management effectively.
- Conducted comprehensive IT audits and risk assessments to identify vulnerabilities, ensuring compliance with relevant regulations and internal policies.
- Developed and implemented audit methodologies and strategies, enhancing the efficiency of audit processes by 30%.
- Collaborated with IT and business units to assess the effectiveness of internal controls, providing actionable recommendations for improvement.
- Prepared detailed audit reports for senior management, outlining key findings and risk mitigation strategies.
Assisted in the development and maintenance of the organization's compliance program, ensuring adherence to standards such as ISO 27001 and PCI DSS.
- Conducted regular reviews and assessments of compliance risks, facilitating necessary adjustments to internal policies and procedures.
- Trained staff on compliance requirements and best practices, leading to a 40% decrease in compliance violations.
- Coordinated with external auditors during annual reviews, resulting in successful audits and favorable assessments.
-IT Audit Methodologies
- Risk Assessment and Management
- Compliance Standards (SSAE18, PCI DSS, SOX)
- Internal Controls Evaluation
- Cross-Functional Collaboration
- Audit Reporting and Documentation
- Process Improvement
- Regulatory Compliance
Scrum master