Abigail B. Ampah Email and Phone Number

• Completed Sarbanes-Oxley (SOX) Section 404 testing of critical systems and applications that impact the company and communicate with the Company's external auditors on general computer control related matters and SOX test procedures.• Have in depth experience performing audit with IT general controls (ITGC) such as, access control, change management, IT operations, User Access Reviews, Provisioning, Deprovisioning, Privileged level access, Windows local, SQL and Active Directory.• Past audit assignments include Global Data Privacy review, Data Center Reviews, Pre-and Post-Application Implementation Reviews, Internal Fraud assessments, IT infrastructure and application review and Special Controls.

• Actively participated in conducting information technology (IT) controls audit and reviewed controls in compliance with section 404 of the Sarbanes-Oxley Act, tested the adequacy and effectiveness of IT General Controls.• Lead SOX testing and internal audits, identifying control weaknesses and recommending necessary remediation measures to senior management and relevant stakeholders.• Implemented and enforced security measures to ensure compliance with SOX regulations, regularly conducting access reviews and audits to identify and mitigate potential risks.

• Adhere to established frameworks and complete audit tasks on time while leveraging industry best practices to execute cost-effective audits.• Demonstrate strong analytical skills to review internal controls of the organization and conduct information system/ IT risk assessment; document risks and control issues, and develop audit programs to evaluate control risks and designs.• Evaluate the design and operating effectiveness of IT General Controls (ITGCs) and Application Controls through in-depth control testing, including IT infrastructures; facilitate walk-throughs to thoroughly review the controls and secure the integrity and reliability of the entity's information systems.• Conducts review of client's third party SOC reports/bridge letters for controls' design and effectiveness.