• Conducted IT Application Control (ITAC), IT General Control (ITGC), IPE, and Configuration controls testing across 21 IT systems for SOX Compliance; systems tested include ADP, Workday, GitHub, AS400 IBM iSeries, OneSource, Oracle, custom in-house applications, and others. • Audited IT processes associated with the following business functions: Accounts Payable, Accounts Receivable, External Reporting, Fixed Assets, the General Ledger, National Accounts, Payroll, and Tax.• Collaborated with 50+ members of Management, process/system owners, and other stakeholders to perform walkthroughs evaluating control risks and weaknesses, identify control gaps, provide recommendations for corrective action, and cultivate positive professional relationships to facilitate audit planning and execution.• Scoped control suites for three new systems, one of which was an in-house custom application, to be added into the SOX IT environment for compliance.• Tested 100+ controls encompassing logical access testing, provisioning of new/modified user access, change management and migration, segregation of duties, security configuration, and completeness & accuracy of reports.• Mentor new Sr. Associate and Associate level staff in the following areas: Controls testing peer reviews, system processes of controls previously tested, walkthroughs with Process Owners, SQL code reviews, and Excel formulas/functionality.• Reviewed SOC-1 reports to mitigate risk in 3rd party applications, such as ADP, ION, OneSource, Workday, and Workiva, by ensuring they met industry standards and were compliant with both vendor and internal ITGCs.• Utilized tools such as ServiceNow, Active Directory, Microsoft Azure DevOps/TFS, RSIM, Excel, Teams, SharePoint, and Snagit to perform audit testing and document audit evidence.

I am responsible for leveraging knowledge and understanding of IT internal control frameworks, industry best practices, and requirements of the Sarbanes Oxley Act of 2002 to perform IT General Controls testing and determine the effectiveness of existing IT system and application controls for SOX compliance. In my role, I maintain accurate records of audit work performed, audit findings and observations, auditee responses, and document exceptions to compliance with Company policies, standards, procedures, and guidelines, as well as weaknesses in internal controls. Continuously developing positive relationships with my team, system & process owners, and other stakeholders enables me to communicate audit findings and assist in recommending corrective action based on audit results.

• Analyze and prepare Form 990-T and related tax forms for filings, extensions, and amendments of Trust, IRA, 401(k), and similar non-exempt accounts.• Create process workflows in Alteryx Designer to perform data analytics, client data reconciliation, and tax calculations in preparation for filing Form 990-T and related returns.• Managed, updated, and was responsible for the workflows and bots used to automate the filing of several hundred thousand Form 8868 extensions.• Build Robotic Process Automation (RPA) bots with UiPath to automate processes such as filing Extensions, generating IRS Notice Response letters, extracting specific tax forms from PDF documents, combining multiple PDFs together, and other manual/repetitive tasks.• Facilitate technology trainings for internal team Associates and Interns pertaining to Robotic Process Automation, Data Analytics, and portions of the 990-T filing and preparation process.• Maintain digital upskilling and continuous learning by participating in 50+ hours of non-required training in the UiPath Immersion Experience and earning UiPath’s RPA Developer Foundation Training Diploma of Completion.

• Ran projections on 116 New York state tax returns to determine the impact on fiduciary adjustments and the clients’ changes in liability due to a recent change in New York state tax law.• Performed tax research on Qualified Small Business Stock (QSBS), IRC §1202, and IRC §57(7) to determine appropriate tax treatment for a client’s QSBS.• Updated Publicly Traded Partnership K-1 documentation into the trust management software as a service platform.• Created a bot, using UIPath, to automatically read user data from an Excel workbook and input that data into the ticketing system to create service request tickets for removing user access to client information.• Examined trust transactions to verify bank tax codes, assign appropriate Beneficiary ID’s, and CUSIP codes.

• Performed Logical Access testing against user accounts within in-scope applications, databases, and operating systems to ensure SOX compliance in quarterly user access reviews.• Participated in system walkthroughs with internal/external auditors and system owners to test internal ITGCs such as Administrator Access, Segregation of Duties, and Password Complexity requirements.• Oversaw Change Management migration of ITSM HEAT & ServiceNow tickets to ensure proper approvals and Segregation of Duties requirements were met before changes were pushed to Production.• Reviewed SOC-1 reports to mitigate risk in 3rd party applications by ensuring they met industry standards and were compliant with both vendor and internal ITGCs.• Created and gathered SOX testing materials and IPEs, such as user access lists, for internal and external auditors’ interim and year-end testing.• Analyzed computers, laptops, and other IT Assets with Nexpose to identify high-risk vulnerabilities in company networks and include them on the weekly security reports for leadership.• Co-authored Western Refining’s Cybersecurity Incident Response Policy and Procedure documents.• Compared Western Refining’s cybersecurity practices with the NIST CSF Framework using CSET 8.0.• Maintained policy and procedure documents such as Corporate IT Security, Data Classification, and Disaster Recovery.• Researched previously identified Cybersecurity weaknesses and assisted in preparing for penetration testing.

• Awarded the Avnet iRecognize Bronze Award for Customer Service. July 2015• Assisted in the implementation of the quarterly Global Customer Engagement Survey.• Updated the CEO’s quarterly Top 100 Companies Report with customer satisfaction information from the survey.• Collaborated with regional executives to update customer data and validate regional feed files in Excel.• Trained new members of the Global Customer Engagement team and regional users.• Audited our standard User Management practices on the MaritzCX SaaS platform; identifying nine areas of potential risk in our current processes and 2 process improvements, which MaritzCX subsequently implemented.• Drafted flow charts and training documents to standardize the User Management and Feed File Audit processes.