● Manages internal programs to establish, document, and track compliance of company assets to industry and government standards and regulations such as SOC 1 & 2, SOX, PCI DSS, and ISO 27001 & 27018 among others.● Evaluates information technology and privacy risks associated with existing and proposed business operational programs, systems, applications, practices, and procedures of the organization through periodic/ad hoc audit projects.● Conducts comprehensive compliance assessments with extensive gap analysis and formulates rules-based remediation plans and process improvements for consideration of management and stakeholders.● Examines the design and operating effectiveness of controls within the Oracle Cloud Infrastructure and Applications.● Performs compliance validation for migration of legacy systems and database centers to the cloud infrastructure.● Facilitates research and interpretation of current and pending governmental laws and regulations, industry standards, and customer contracts to communicate compliance requirements to the business.

● Performed end-to-end information technology, operational, compliance, and financial audit engagement cycles.● Established audit programs in accordance with relevant standards, policies, guidelines, and regulatory requirements.● Identified gaps and provided practicable recommendations to improve business processes and information systems.● Prepared and documented comprehensive audit reports to reflect the results of the audit engagements. ● Monitored and reported the status of remediation plans from internal and external audits.● Assisted the internal audit head in the development of the annual risk-based audit plan.● Implemented tools and procedures which improved overall efficiency of the internal audit team.

● Experienced associate of the information technology risk assurance practice of PwC Philippines with exposure to different engagements such as IT audit, internal audit, ISAE 3402 audit, SOC 1 & 2 audit, SOX audit, business process review, anti-money laundering review, post-implementation review, and data privacy review to local and multinational clients in banking, stock brokerage, manufacturing, business process outsourcing, construction, real estate development, railway, and non-profit organizations. ● Specialized in testing IT general controls and application controls covering different systems and businesses.● Deployed to a foreign country for a statutory audit engagement and performed IT systems and processes assurance for that country’s largest commercial bank.● Spearheaded the data privacy review across multiple offices of the Philippines’ largest bank for veterans.● Performed SOC 1 & 2 audits and ISAE 3402 audits for a multinational bank and evaluated the design and operating effectiveness of the client’s controls to ensure compliance with organizational requirements. ● Conducted internal audit services for a publicly listed construction corporation in the Philippines and tested the client’s cash management, inventory management, and equipment utilization rates.● Performed business process reviews for a premier real estate developer in the Philippines and provided value-adding improvements and recommendations to the client’s key business areas.● Conducted internal audit services for a top stock brokerage firm in the Philippines and tested the client’s end-to-end trading process and related system applications. ● Performed anti-money laundering reviews for a multinational financial service institution and assessed the compliance of the client’s business operations to laws and regulations. ● Conducted post-implementation review for a major railway corporation in the Philippines and evaluated their significant third-party system acquisition process.

● Assisted in the day-to-day operations of the internal audit department. ● Provided substantial services through value-adding activities assigned by the department head and managers. ● Involved in the following projects: quarterly audit committee meeting preparation, company-wide info script formulation, systematic record retention process improvement, and periodic inventory audit count.

● Provided substantial services through value-adding activities assigned by the department head and managers. ● Gained significant work experience in the audit & assurance, tax advisory, advisory services, and finance & accounting outsourcing departments of the multinational audit firm.