• Evaluated IT and business processes for effectiveness and efficiency by gaining an understanding of and documenting key business processes and internal controls.• Reviewed internal policies, procedures, and relevant laws, rules, and regulations to assess compliance and the adequacy of underlying internal controls.• Conducted IT general controls assessments, including access control, change management, IT operations, disaster recovery, and platform reviews (Windows and UNIX OS).• Evaluate the IT governance structure, including the IT organizational structure, policies, and procedures, to ensure proper segregation of duties, accountability, and adherence to regulatory guidelines outlined in SOX.• Applied SOC 1, COSO and COBIT frameworks to ensure accurate and timely completion of audits.• Identified risks associated with IT infrastructure, operations, and applications, including pre/post-implementation audit reviews for ongoing IT projects and legacy applications.• Acted as a liaison between in-house managers/IT department and external financial and operational auditors.• Prepared audit scopes, reported findings, and presented recommendations to enhance data integrity and operations.• Identify any control gaps or deficiencies that need to be addressed for the organization to achieve SOC 2 compliance.• Evaluated segregation of duties over application security, specifically with the company's ERP systems (SAP, PeopleSoft, and Oracle Financials), and executed audit strategies.• Demonstrated knowledge of the Control Objectives for Information and Related Technology (COBIT) framework developed by the Information Systems Audit Control Association (ISACA).• Maintained communication with the company's external auditors regarding general computer control matters and SOX test procedures.• Conducted extensive review and analysis of gathered information, and prepared comprehensive written summary reports.