Compliance Business Analyst / Project Management Resume

SUMMARY

8+ years of experience as IT Compliance Analyst /IT Risk Analyst/ IT Auditor/Project Management

TECHNICAL SKILLS

PROFESSIONAL EXPERIENCE

Confidential

Compliance Business Analyst / Project Management

Responsibilities:

Planning and coordinating SOX Self - Assessments(Q&A) to identify any control gaps using RSA Archer GRC Tool
Configuring RSA Archer Application, layouts, workflows, questionnaires etc.
Managing NIST 800-53 implementation
Vendor Risk Management using RSA Archer
Track remediation effort using RSA Archer GRC Tool
Benchmarking of ISMS based on ISO 27001 framework and developing a unified set of ISMS framework entity wide
Participating Design walkthrough for SOX Control testing
Coordinating and validating the SOX Quarterly User Access Reviews for multiple technologies
Coordinating remediation of IT security gaps identified with SOX,PCI DSS and IT Non-Regulatory areas
Maintain and Document Sox Compliance documentation
Worked in in Software development team and gained deep understanding of Software Development Cycle
Communicating and reporting on Risk Metrics to IT and Governance Management
Compliance with Privacy Regulations(GLBA, FCRA, FACTA, Opt outs ) in banking
Maintenance of IT Systems Inventory
Business Requirement Gathering and coordinating requirements with the Development team
Monitoring the Project progress and reporting to senior management of any impediments/risks
Maintaining Project documentation per enterprise standards
Working with AWS to define S3 bucket policy, Roles, Security Groups etc. Knowledgeable regarding computer security

Confidential

Auditor

Responsibilities:

Identifying Project Risks throughout the Audit lifecycle, interact with management and audit teamto mitigate project risk.
Planned, conducted and supervised Audits (IT and Business Processes)
Updated Risk Assessment and identified any new risks, modified Audit Plan in accordance with any significant changes in the Computer Processing Environment
Discussed with Process Owners about Policies and Procedures, Documentation of Controls
Participated and supervised Testing of Controls
Discussed Audit Findings with management, followed up for resolution and reporting

Confidential

Consultant

Responsibilities:

Implemented and tested General Computer and Application Controls during Software Development
Remediation plan for identified deficiencies, follow up and closure of deficiencies.
Documented Functional process flows and imparted End User training

Confidential

Deputy Manager

Responsibilities:

Conducted SOX Remediation - Drafting of Policy & Procedures (such as End User Computing Applications - Spreadsheet Controls) and monitoring the implementation progress, retesting and closure of gaps.
Conducted SOX Attestation - Benchmarking of Client controls against Confidential Control InfoBase, planning, testing, discussion and closure of audit observations with senior management.
Planned and conducted IT Security Audits with different ERP’s (SAP, Oracle Application, JD Edwards and Custom Applications) across diverse industries
Planned and conducted SSAE16 (SAS 70) Type 1 and Type 2 assignments Internal Audits

Confidential

Audit Manager

Responsibilities:

Planning audits in for audit scope, rotation of sub processes and resource scheduling
Conducting Opening meetings with management
Participation in fieldwork ( areas of revenue assurance, user provisioning, purchasing)
Identify audit issues and develops recommendations and preparation of report
Reviewing work of subordinates
Develop recommendations for areas of improvement, write reports documenting findings, and follow up on recommendations to ensure suggestions are implemented Complete audit reports for dissemination to management and ensure proper follow up outstanding items and recommendations
Conducting exit meetings with Senior Management.

Confidential

Manager

Responsibilities:

Review internal controls over business processes for group companies.
Evaluate accounting systems to determine their efficiency and effectiveness
Serve as a liaison with key business areas to ensure changes in business processes are updated in the documentation database
Identify audit issues and develops recommendations
Develop recommendations for areas of improvement, write reports documenting findings, and follow up on recommendations to ensure suggestions are implemented Complete audit reports for dissemination to management and ensure proper follow up outstanding items and recommendations
Preparing MIS for group Companies