It Auditor | Compliance Analyst | Cybersecurity Analyst
Current• Plan and manage IT General Controls (ITGC) audits, ensuring compliance with COSO, SAS70, PCI, SOX, NIST, ISO 27001, and COBIT standards.• Conduct walkthroughs, formulate test plans, document gaps, test results and exceptions, and recommend remediation.• Assess IT internal controls, including access control, change management, operations, disaster recovery, and job scheduling for compliance and operational audits.• Identify and communicate audit findings to senior management and clients during external audits.• Implement process improvements in SOX testing, leading to increased efficiency in review time and enhanced financial reporting.• Perform all stages of audits, from planning and program preparation to fieldwork execution, reporting, and follow-up.• Coordinate with stakeholders and clients to remediate audit findings and ensure robust system security.• Support the development, implementation, and monitoring of data confidentiality, system integrity, reliability, recovery methods, and procedures.• Conduct internal and external IT risk assessments, perform GAP analysis against industry standards, and provide recommendations for mitigation.• Ensure confidentiality of company information and adherence to policy, procedure, and practice in line with FISMA, NIST, and agency standards.• Analyze and interpret data from SIEM, IDS/IPS, and endpoint security systems to identify cyber threats and vulnerabilities.• Conduct audit review procedures against HITRUST, NIST, PCI, and internal security control frameworks.• Examine systems using Nessus, evaluate vulnerability scan reports, and monitor remediation activities.