I bring hands-on IT Audit and GRC experience performing ITGC testing, risk assessments, control evaluations, walkthroughs, TOD/TOE testing, and audit-ready documentation aligned with SOX and SOC standards.

My experience includes evaluating controls across access management, change management, IT operations, backup and recovery, and logging environments while supporting remediation tracking and compliance readiness activities.

With a structured audit mindset, practical control testing experience, and strong documentation discipline, I am prepared to contribute quickly within IT Audit, SOX, technology risk, and compliance-focused environments from day one.

IT Audit & SOX Execution

• Perform ITGC testing across Logical Access, Change Management, and IT Operations domains

• Execute TOD/TOE testing using risk-based audit methodology

• Identify control deficiencies, assess impact, and support remediation activities

• Produce audit-ready workpapers, narratives, walkthroughs, and testing documentation aligned with SOX and SOC standards

Governance, Risk & Compliance (GRC)

• Conduct risk assessments and control evaluations aligned with enterprise frameworks

• Support third-party/vendor risk reviews, evidence validation, and compliance monitoring activities

• Map risks and controls to COSO, NIST, ISO 27001, SOC 2, and PCI DSS frameworks

• Support remediation tracking, issue management, and governance reporting initiatives

Audit Documentation & Control Frameworks

• Develop Risk & Control Matrices (RCMs), testing templates, and audit documentation

• Maintain ITGC testing workpapers, sampling documentation, and process narratives

• Support audit fieldwork, evidence collection, and walkthrough documentation

• Contribute to process improvement and control environment enhancement initiatives

Cross-Functional Collaboration

• Partner with stakeholders to support audit readiness and compliance initiatives

• Assist with policy, control, and process documentation activities

• Support CSA/RCSA exercises, process mapping, and governance-focused projects

• Contribute to GRC platform usage, remediation monitoring, and compliance coordination activities