Sadia T Email and Phone Number

● Engage Actively with process owners and strategically build working relationships to help facilitate communication channels during future audits.● Perform detailed reviews of work papers and train staff on quality documentation.● Adopt a risk-based approach to determine audit scope, and the impact of control weaknesses, and identify the medium and high risks for testing.● Analyze business unit activities and assess risk levels to determine the adequacy of ITGCs, financial and security controls.● Review ITGC for applications to 400analyze its design and operating effectiveness independently from the planning stage to reporting with minimal supervision.● Assess ITGC as part of internal and operational audits.● Assist clients in preparation for external compliance audit activities such as PCI-DSS and SOX Compliance reviews.● Perform cybersecurity audit in alignment with the NIST framework.● Manage audit projects effectively within the budget and meeting timelines.● Communicate and present validated audit findings and recommendations to management for advice and remediation.● Conduct in-depth reviews of the design and operating effectiveness of controls for in-scope processes/systems.● Collaborate with Financial/Operational auditors as part of an integrated team to understand all Information Technology aspects of areas under review and the related control requirements.● Conduct the review of key Information Technology controls such as Backup, Data Integrity, testing, Audit Logs, Remote Access Control, Application-Level Security, and EnvironmentalControls.• Supervise interns and junior auditors during the audit engagement.• Conduct walk-through, document gaps, and formulate test plans, document test results, and exceptions with significant autonomy and limited supervision.

● Conducted walkthroughs with a test of one sample and documented the design appropriateness and operating effectiveness of Information Technology General Controls (ITGCs) and IT Application Controls (ITAC).● Performed pre-implementation and post-implementation reviews of the System Development Life Cycle (SDLC) to ascertain the design adequacy and operating effectiveness of controls.● Executed information security/cybersecurity audit, focusing on Administrative, Physical and Technical safeguards, testing preventive, detective, corrective, and compensating controls.● Actively participated in Supervision, documentation, and analysis of processes, risk, and control matrices in support of financial reporting to produce high-quality SOX narratives● Provided and documented audit conclusions in accordance with the Institute of Internal Audit (IIA) Standards, also in alignment with the Information Systems Audit and Control Association (ISACA).● Coordinated ad-hoc internal control assessments to determine design appropriateness and the operating effectiveness of internal controls. ● Identified and communicated control gaps and auditing results to the senior management and relevant stakeholders.● Performed project management for internal audit team initiatives, including status tracking and milestone communications to team members and senior management.● Built and sustained professional relationships with key personnel responsible for the designated audit units. Stay organizational structure, policies, and procedures within the designated audit units. ● Completed IT Infrastructure and data center audits to assess its efficiency and security.● Performed audit of information systems, platforms, and operating procedures in accordance with established corporate standards for efficiency, accuracy, and security. ● Executed technical audits of IT infrastructure controls – Servers, Active Directory, Operating Systems, and Databases.