We provide IT Staff Augmentation Services!

It Auditor Resume

2.00/5 (Submit Your Rating)

Washington, DC

Hire Now

SUMMARY:

  • Professional IT auditor and Controls specialist with 4 years of experience in audit, risk assessments, In - depth knowledge of Sarbanes-Oxley Act (SOX), HIPAA, PCI DSS, Access Control, IT General Controls (ITGC), SAS70/SSAE16 attestation and ERP security assessment (SAP, PeopleSoft & Oracle Financial), Federal guidelines and NIST 800-53 Frameworks.

TECHNICAL SKILLS:

  • Microsoft words
  • Excel
  • Share Point Based System
  • SAP
  • Oracle Financial and use of automated scripts
  • TAF
  • IDEA
  • CSAM
  • ACL
  • NESSUS and Team Mate
  • Audit Management System
  • Audit Command Language (ACL)
  • MS Visio
  • Lotus Notes.

WORK EXPERIENCE:

Confidential, WASHINGTON, DC

IT AUDITOR

Responsibilities:

  • Extensive experience in performing IT Audit using ITGC, Application Controls, PCI DSS, COBIT,COSO, ISO 27001 and NIST 800-53 frameworks.
  • Performed PCI audit and HIPAA audit for commercial companies and health care providers.
  • Reviewed enterprise security program. Validates IT control implementations, performs risk-based audit. Performs walkthrough on controls. Reviews CAP; validates remediation control. Performs IS audit on routers, switches, firewalls and remote access.
  • Conducted root cause analysis of vulnerabilities and coordinates with appropriate stakeholders to remediate findings on IT audit engagements within schedule and budget constraints.
  • Leads IT Implementation and testing of internal controls over financial reporting: Sarbanes Oxley Act (SOX), performs Walkthroughs of controls and evaluates operating effectiveness of controls.
  • Performed audit of IT general controls such as access control, change management, IT Operations, disaster recovery and platform reviews (Windows)
  • Performed SSAE 16 (SAS 70) SOC 1 Type 2 report reviews for organizations within Insurance, Health, Financial services and other industries.
  • Performed various audit engagements using COBIT and FISCAM frameworks, both in commercial and government entities. Also performed SOX 404 annual compliance testing.
  • Responsible for planning IT audit engagements, including preparing and monitoring budget, as well as scheduling and coordinating resources needed to complete the audits.
  • Evaluated segregation of duties over application security involving the company's ERP systems (SAP, PeopleSoft, and Oracle Financials) and execute audit strategy.
  • Knowledge of Control Objectives for information and related Technology (COBIT) framework developed by the information Systems Audit Control Association (ISACA).
Confidential, DALLAS TEXAS

IT AUDITOR

Responsibilities:

  • Evaluated IT and business processes for effectiveness and efficiency, through obtaining an understanding of and documenting key business processes and internal controls.
  • Reviewed internal policies and procedures and existing laws, rules and regulations to determine applicable compliance and the adequacy of underlying internal controls.
  • Performed IT general controls such as access control, change management, IT operations, disaster recovery and platform reviews (Window and UNIX OS).
  • Utilized COSO and COBIT to accurately complete audits in a timely manner.
  • Identified risks associated with IT infrastructure, operations and applications including pre/post implementation audit reviews for ongoing IT projects along with current legacy applications.
  • Liaised between in-house managers/IT department and External Financial and Operational Auditors.
  • Prepared audit scopes, reported findings and presented recommendations for improving data integrity and operations.
  • Perform assessment of IT internal controls as part of financial statement audit, Internal and operational audits, Attestation engagement, and Audit readiness.
  • Conduct testing of Sarbanes-Oxley (SOX), OMB Circular A-123 Audit and Service Organization Control (SOC) SSAE 16 Review, using COBIT and FISCAM framework
  • Review of IT General Controls (ITGC) and various applications, databases and operating systems.
  • Extensive knowledge of ERP systems (SAP and Oracle Financials), Microsoft Dynamics, and NetSuite.
Confidential

IT Analyst

Responsibilities:

  • Provided quarterly risk and compliance auditing of the following IT areas: Desktop deployment (group policies, security software), Enterprise Network Services (network, firewall and VPN deployment), IT Security department (cyber security procedures and policies)
  • Followed established cyber security controls guidance in compliance with SOX and GLBA
  • Provided expertise and analysis toward certification and accreditation activities
  • Managed multiple cyber security and risk reviews per quarter
  • Provided expertise and guidance to teammates and management during development of the risk and compliance program

Hire Now
Report an issue

We'd love your feedback!

Privacy Policy
Resume Categories
Client Services
Job Seekers
Visa Sponsorship