Eric Luz Email & Phone Number

California, United States

Santa Clara, California, US

• Creating and implementing security controls
• Ensuring controls are compliant to industry standards such as: SOX, ITGC, MLPS, NIST, NIST AI
• Coordinating with the control owners, VP and upper management regarding security controls tobe implemented
• Created and authored the Financial Operations System Policy for the purpose of setting thestandards to comply with SOX regulations
• Create, update and implement policy
• Resolving findings conducted by external auditors

Chicago, IL, US

• Actively participate and lead client engagements from start to completion, which includes planning, executing, and reporting on co-sourced and out-sourced IT internal audits, IT internal control reviews, IT risk.
• Support engagement Manager and/or Senior Manager/Director in preparing and managing engagement project plans, timelines, budgets, economics, and status reporting.
• Bring an innovative and analytical mindset to help our clients solve business issues and enable more efficient project execution.
• Supervise, train, and mentor Associates and Interns on engagements, and assess performance and provide feedback.
• Obtain an understanding of clients’ business, objectives, strategy, operations, processes, IT systems, and controls.
• Develop and execute IT internal audit workplans and control test procedures based on engagement scope, and client environment risk factors.

Menlo Park, CA, US

• Loading and reporting data out of various databases and excel spreadsheets, including uploading data and documentations back into various databases.
• Run queries and refreshable reports out of the database.
• Creating workspaces wherein client data is to be uploaded.
• Grant user access controls to clients and employees working within the organization.

London, GB

• Conducts risk analysis and assessment of vendor information and documentation against a client’s IT security and data privacy requirements
• Verifies that all required SIG (Lite) questions have been answered by vendor and all required documentation has been received
• Identifies issues and work with vendor to resolve/accept
• Assesses vendor answers and follow up with vendor directly for questions
• Performs security assessments of new and existing service providers
• Generates post assessment risk reports and recommendations