Penetration Testing• Utilized web application testing tools to identify vulnerabilities and control weaknesses in IoT devices • Developed internal testing methodology and tools for IoT devices• Presented technical trainings on penetration testing techniquesSecurity Attestations and IT Audit Support • Managed teams in a variety of security attestation and controls review engagements• Attested against various IT Systems and security frameworks including, ISO 27001/2, PCI, and Trust Service PrinciplesInformation Systems Controls Reviews • Delivery of audit reports over various information systems and security processes and controls including code migration management, vulnerability management, and device compliance• Developed internal tools and trained associates to enhance audit efficiencies

Serving within the Security and Technology team in Risk Assurance. Working across multiple sectors including government, financial, commercial and utilities.Key responsibilities:• Identity and access management consulting• System security reviews• Penetration testing & vulnerability assessments• System audits

Serving within the Internal Audit team in Risk Assurance. Working across multiple sectors including local government, financial and commercial.Key responsibilities:• Process and controls reviews• Risk management frameworks• IT general controls audit