• Conduct IT risk assessment; documented related risks and note key control issues; developed appropriate audit programs to test the control risks identified and subsequently evaluated control designs, optimization and assurance over operational and compliance process.• Assist with the ongoing compliance testing and reviews of activities on regulatory requirements.• Identify, track, and provide support and expertise to remediate security gaps to minimize IT security and information risk.• Create and customize dashboards for tracking, monitoring, and reporting operational security and compliance metrics.• Ensure support for compliance and risk management projects as needed.• Analyze cyber security events and incidents to determine the root causes and apply appropriate mitigation measures as outlined in the incident response plan.• Engage stakeholders to promote a strong risk culture and ensure proper training and support on operational IT risk management documents, tools and technologies.• Ensure control procedures, risks, and policies are properly mapped to industry regulations and guidelines• Assisted in classifying risk attributes and threat level, evaluating and documenting the Inherent and Residual Risk Matrix.• Tracking of gaps and ensuring that the gap owners come up with action plans to remediate the inherent risk.• Coordinate with key teams to obtain and review evidence of compliance to support technical compliance or audit requirement.

• Participate in the planning and execution of IT audits, perform walkthroughs and testing procedures on SOX IT controls (ITGCs and application controls), document testing results and communicated findings to the process owners and management.• Work with IT management and functional managers to enhance IT control environment, and work with Engagement Team to identify and resolve client issues discovered during Audit and Review Process.• Prepare work papers as part of documenting procedures to fully support audit findings and ensuring audit conclusions are based on a complete understanding of the process, circumstances, and risk to the organization.• Recommend improvements that are relevant, practical, and effectively address and correct areas of control concern to process owners.• Track and follow up on audit findings to validate process owner's Corrective Action Plans.• Establish working relationships with IT and business units at various levels to identify and understand process changes or system implementations that are relevant to SOX compliance.• Participate in new systems development and post implementation audits to ensure the System Development Life Cycle (SDLC) is followed and ensure adequate internal controls are built into the systems.• Collaborate with management to evaluate Business Recovery and Continuity Plans as well as implement controls in new systems deployment.