Dre A. Email & Phone Number

Hi, I am Dre, a highly motivated IT Auditor with 3+ years of experience in internal audit, and strong experience in the planning and execution of internal audit procedures. Strong understanding of ITGC and ITAC over IT Operations, Access, Security, Change Management, and Backup procedures. Knowledge of incident monitoring, response to problems & change management. Skilled in Enterprise Risk Management, Business and Process Audit, Internal Audit, Consulting, and IT Strategy. Experienced in policy and procedure reviews, Operational and Compliance audits.Previously, had a broad level 15+ years of finance, tax, system implementation, and compliance experience, whilst optimizing value is underpinned by training and development received from professional practice in a global Top 4 and a regional advisory firm with global clients.

• 

  Information Technology Auditor

  Ey

  Jan 2020 - Present

  Assess adequacy of controls and coordinated implementation of specific information security controls for new systems and services. Conduct audit readiness with aim of reducing controls weaknessesReview documented information security policies, standards, and procedures. Execute information security audit, testing preventative, corrective, detective, and compensating controls.Responsible for performing internal audit assignments as defined in internal audit plan, also assisted with special projects and managed assigned tasksExecute information systems audits which include ITGC's testing, IT Application Controls testing and IT Infrastructure audit including, but not limited to Active Directory, Operating System, Servers, Network Device, and databases.Review and analyze SOC 1 Type 2, performs SOC 1, 2 and 3 evaluations.Participate in new systems development and post-implementation audits to ensure System Development Life Cycle (SDLC) is followed.Document test of control results in accordance with department methodology; annotate work papers sufficiently to support Lead and Manager reviews; ensure conclusions reached on control effectiveness are sufficiently supported.Advise client and audit management of issues identified throughout the audit, and work with client management to identify corrective action plans to effectively mitigate the deficiency and risk of a reoccurrence.Provide advisory review recommendations to management on the sufficiency of internal control design for new computer applications, systems, and infrastructure changes prior to implementation. Also provide recommendations to IT management on sufficiency of new policies, procedures, and guidelines prior to publication.Maintain effective relationships and promote internal controls and control awareness

• 

  The University Of Manchester

  Master Of Business Administration - Mba