Eric Luz Email & Phone Number

California, United States

Santa Clara, California, Us

• Creating and implementing security controls• Ensuring controls are compliant to industry standards such as: SOX, ITGC, MLPS, NIST, NIST AI• Coordinating with the control owners, VP and upper management regarding security controls tobe implemented• Created and authored the Financial Operations System Policy for the purpose of setting thestandards to comply with SOX regulations• Create, update and implement policy• Resolving findings conducted by external auditors• Monitor and evaluate the efficiency of controls and strive to continuously improve them whileadapting to changing business needs and regulations• Prepare reports for senior management and external regulatory bodies as appropriate• Implement JIRA ticketing system• Ensure that all acquired companies comply with Soundhound security standards.• Resolved SOD findings for all in-scope SOX applications which include the following:o Netsuiteo Anaplano UKGo Payworkso SalesForceo Shareworkso FloQasto UBSo SVBo Wells Fargoo Corpayo Google Enterprise

Chicago, Il, Us

• Actively participate and lead client engagements from start to completion, which includes planning, executing, and reporting on co-sourced and out-sourced IT internal audits, IT internal control reviews, IT risk management program assessments, and tests of IT controls (IT general controls, application controls, interface controls, key reports, etc.) as part of management’s internal control over financial reporting (ICFR) Sarbanes Oxley (SOX) compliance program.• Support engagement Manager and/or Senior Manager/Director in preparing and managing engagement project plans, timelines, budgets, economics, and status reporting.• Bring an innovative and analytical mindset to help our clients solve business issues and enable more efficient project execution.• Supervise, train, and mentor Associates and Interns on engagements, and assess performance and provide feedback.• Obtain an understanding of clients’ business, objectives, strategy, operations, processes, IT systems, and controls.• Develop and execute IT internal audit workplans and control test procedures based on engagement scope, and client environment risk factors.• Applying knowledge of IT trends, systems and processes, evaluate findings for significance and risk, and develop recommendations for improvement based on leading practice.• Work with client to deliver services in accordance with project leadership and client expectations (gather information, resolve problems, recommend internal control enhancement opportunities, etc.).• Develop and maintain good working relationships with colleagues and clients.• Work collaboratively across Advisory Business Lines (Risk, Strategy and Transaction and Transformation and with other Service Lines (e.g., Audit Services and Tax Services).• Participate in relevant professional organizations (ISACA, etc.)• Participate in business development activities and proposal development as appropriate.

Menlo Park, Ca, Us

• Loading and reporting data out of various databases and excel spreadsheets, including uploading data and documentations back into various databases.• Run queries and refreshable reports out of the database.• Creating workspaces wherein client data is to be uploaded.• Grant user access controls to clients and employees working within the organization.

London, Gb

• Conducts risk analysis and assessment of vendor information and documentation against a client’s IT security and data privacy requirements• Verifies that all required SIG (Lite) questions have been answered by vendor and all required documentation has been received• Identifies issues and work with vendor to resolve/accept• Assesses vendor answers and follow up with vendor directly for questions• Performs security assessments of new and existing service providers• Generates post assessment risk reports and recommendations• Managed Third Party relationship through milestone calls and constant communication through email.• Performed a triage on a newly formed assessment.• He has completed an end-to-end assessment of a third party as an operations analyst.• Supported the improvement of business processes within the organization by creating guidelines on how to leverage SOC reports and ISO certifications.• Helped redesign the in-house triage application to promote a user-friendly interface• Familiar with the latest cybersecurity standards such as NIST & ISO27001• Handled assessments focused on a cybersecurity framework• Familiar with data privacy laws and regulations such as GDPR, CPRA, HIPAA, PCI-DSS• Handled assessments with the including the domains:- Internal Controls- Business Continuity- Logical Access Management- Threat and Vulnerability Management- Logging and Monitoring- Change Management- Systems Development Management and Lifecycle- Encryption- Cloud Computing