Senior Technology Risk Consultant with extensive experience and exposure to various industry related risks and controls aiming to deliver quality work and adding value to the company and the clients.
Overview
7
7
years of professional experience
1
1
Certification
Work History
Senior Technology Risk Consultant
Ernst & Young
07.2022 - Current
Executed IT-related audit procedures in FAIT engagements
Focused on providing an opinion on management assertion over business processes and controls including IT General controls
Performed high quality professional day-to-day management of internal/external audit engagements
Maintained relationships with client management to manage expectations of service, including scope and timing of the engagements
Led discussion on noted observations and recommending management action items
SOX | IT Audit Supervisor
Scrubbed.net Global Services
09.2021 - 02.2022
Led walkthrough discussions for both IT General Controls and IT Application Controls
Reviewed ITGC and ITAC WPs prepared by the staffs and added notes to maintain the quality of WPs and to conform with the standard practices
Assisted our onshore counterparts in performing SOC testing
Technology Risk Consultant
Ernst & Young GDS
01.2020 - 09.2021
Extensively involved in the walkthrough, documentation, assessment and testing both the design and operating effectiveness of client's IT General Controls
Performed walkthrough and testing of IT Application Controls
Performed operating system and database review on both operating system and database of Oracle, RHEL, Microsoft Windows and Microsoft SQL
Reviewed controls over the IPE (Information Provided by the Entity) whether management has controls over applicable risks for identified IPEs and assess whether the design and operating effectiveness over IPEs are effective.
Assisted in SOC I and II reporting engagement testing phases
IT Auditor
Air Materiel Wing Savings & Loan Association
12.2016 - 01.2020
Followed established auditing processes to meet internal and regulatory requirements.
Analyzed data and findings to prepare reports detailing financial information.
Communicated with auditee to obtain necessary information for audits.
Performed observations and evaluated supporting documents to supplement audit findings.
Administered auditing program to address risks and evaluate compliance with regulatory requirements.
Planned and executed follow-up audits at appropriate intervals.
Identified control gaps in processes, procedures and systems through in-depth research and assessment and suggested methods for improvement.
Assessed internal control risks of network through information system audits.