Carried out General IT Controls (GITC) for statutory audits covering access controls, segregation of duties, change management controls, network and data center reviews, covering applications (e.g. SAP, e-financial) operating systems (Windows and Linux) and databases (MSSQL and Oracle). Audited business controls by identifying and testing automated controls, computer generated report testing. Conducted internal audit for a tea brokering company with information security scope areas covering, follow-up audit, IT support management, software asset review, firewall security, system performance, computer use restrictions. Performed vendor audit for client to review the controls through a business process mapping, identifying potential risk and fraud opportunities from both business and technical means, perform data analysis of revenue report. Review of service organization controls (SOC 1 Type 2) reports for outsourced GITC controls. Completed audit papers by thoroughly documenting audit tests and findings and Identified management control weaknesses and provided value added suggestions for remediation.