IT Audit & Control Assurance

• Risk-Based IT General Controls (ITGC) Testing

• Tests Of Design (TOD)

• Tests Of Operating Effectiveness (TOE)

• Structured Control Walkthroughs And Design Evaluation

• Evidence Validation & Defensible Workpaper Documentation

• Audit Sampling Methodologies & Deficiency Analysis

Governance, Risk & Compliance (GRC)

• Governance Program Execution & Cross-Functional Coordination

• Enterprise Risk Assessments 

• Risk-Based Approach Application

• Policy Governance & Compliance Oversight

• Control Assurance & Continuous Monitoring Activities

SOX & Regulatory Compliance

• SOX 404 IT Controls Compliance & ITGC Testing

• Internal Control Over Financial Reporting (ICFR) Support

• Audit Readiness Preparation & Evidence Support

• Compliance Validation & Remediation Tracking

Key IT Control Domains

• Logical Access Management 

• User Provisioning/Deprovisioning

• Segregation Of Duties (SoD) Analysis

• Change Management & SDLC Controls

• Backup & Recovery Processes

• Logging, Monitoring, & Privileged Access Oversight

Third-Party Risk Management (TPRM)

• Vendor Risk Assessments & Due Diligence

• Security Questionnaire Analysis (SIG, CAIQ)

• Third-Party Control Reviews & Evidence Collection

• Risk Evaluation & Prioritization

Risk Assessment & Sampling

• Inherent Risk & Risk-Of-Failure Analysis

• Audit Sampling & Sample Size Justification

• Risk Scoring & Prioritization Frameworks

Frameworks, Standards & Compliance Guidance

• COSO

• COBIT

• NIST CSF

• PCI DSS

• ISO 27001

• SOX 404

• SOC 1, SOC 2, SOC 3

• HIPAA Security & Privacy Rules

Industry Experience

• Financial Services

• Fintech / Payments

• Media & Entertainment

• Healthcare

• Education

• Logistics & Transportation

• SaaS / Technology

GRC & Audit Platforms

• ServiceNow GRC

• RSA Archer

• Diligent HighBond

Enterprise Systems & Technical Environment

• SAP (Ariba, Lumira) 

• Oracle

• Microsoft Dynamics GP

• Active Directory

• Microsoft 365

• Google Workspace

• SharePoint

• Visio

• Tableau

• Power BI

• Kronos

• ReconNet

• Zendesk

• Atlas CRM

• Highspot

AI-Enabled & Intelligent Platforms

AI-Assisted Documentation And Workflow Optimization

• ChatGPT 

• Google Gemini 

• Salesforce AI Features

• HubSpot AI Tools

• Gong

• Salesloft

• Outreach.io

• Actively AI

• Streamlit in Snowflake

• Demandbase

• ZoomInfo