I am an outcome-oriented Cyber Security Audit professional incorporating over 22 years of experience with a strong understanding of Information Technology, Cybersecurity, Risk Management and Banking & Finance. I am passionate about IT Audit and security reviews and continue to learn about new trends in Cloud Security and Cyber Security, including emerging technologies, new regulations and how the related risks would impact the industry, cloud-based application auditing and penetration testing techniques.I have conducted, managed and reviewed:- Cyber Security audit including servers, endpoint and network devices including firewalls specific reviews- Cloud Security reviews including AWS and Azure-hosted environments and review security tools- Active Directory Security and Windows infrastructure reviews- Cloud framework review based on the requirements of APRA - Pentesting and vulnerability assessment (including DoS, Web performance testing and Wireless Penetration tests) and Webpage performance testing using J-meter- Phishing email simulations test using GoPhish, including setting up a server in AWS- Development of Vendor assessment checklist as per the VPDSF standards, in line with ISO 27001, Protective Security Policy Framework (PSPF), ASD Essential Eight and Information Security Manual (ISM) and NIST - Data analytics (CAATs) using ACL and various excel models using formulas and macros- IT General Controls (ITGC) - ITGC reviews consist of access management, change management, network management including firewall, backup management, Antivirus and patch management, Cloud-based application management, etc.)- Application control- Pre-Certification Reviews (ISO 27001 and PCI DSS)- VPDSS (Victorian Protective Data Security Standards) assessments/reviews- Data Centre reviews- Project Management reviews- Business Continuity (BCP) and Disaster Recovery Planning (DRP) reviews- IT Strategy reviewsSpecialities: -Cyber Security audits and Cloud application assessments-Information Security and Technology reviews including IT General and Application Controls Assessments-Vulnerability Assessment and Penetration Testing-Data Analytics using ACL/Galvanize-Website performance testing-Phishing simulation testing-Regulatory and Compliance Assessment-Development of IT security standards and Technology Governance-Project Management reviews-Financial Audit and Assurance