*Assisted in technology, operational, Sarbanes-Oxley (SOX), and Service Organization Controls (SOC) audits throughout the process, ensuring compliance with audit methodology and standards from planning to execution.*Evaluated and performed end-to-end risk and control environment analysis to identify significant gaps and weaknesses in partnership with stakeholders, including process owners and control officers.*Documented process activities and associated risks and controls, including process descriptions, process prioritization, and top-down risk profiles Support and document the determination of inherent risk ratings, control ratings, and residual risk ratings of information risks.*Provided project management support in tracking and coordinating the execution of risk and control self-assessment (RCSA) activities.*Supported iterative review and challenge of assessment results, collaborating with appropriate stakeholders across the lines of defense.*Participated in control testing walkthroughs and prepared meaningful documentation to support testing conclusions.* Coordinated control testing activities, including logistical scheduling and document retrieval to support control testing by internal requirements.*Consulted with the risk assessment team and other stakeholders to ensure control testing is in alignment with broader risk assessment activities. *Performed risk assessments to thoroughly understand the processes in scope, rated the impact and likelihood of risks occurring, and identified and sought key stakeholders within the company to verify the risks' identification, assessment, and management.*Assisted in technology, operational, Sarbanes-Oxley (SOX), and Service Organization Controls (SOC) audits throughout the process, ensuring compliance with audit methodology and standards from planning to execution.*Performed IT General Controls (ITGCs) and IT Application controls (ITAC) testing to establish design adequacy and operating effectiveness.