Zainab K Cisa, Cism Email & Phone Number

Richmond, Tx, Us

United States

• Managing IT operations exceptions which includes working collaboratively with audit teams to execute IT operational and integrated audits.• Under the direction of IT Audit management, lead the planning, testing, and reporting for IT Applications, IT Integrated, and IT SOX audits in accordance with professional and department standards.• Conduct planning activities to identify significant risks and develop appropriate risk-based audit procedures.• Research applicable policies, guidance, and regulations to drive assigned sections of the audit with high quality and within deadlines.• Collect and analyze necessary data for audits, evaluate information, and draw logical conclusions.• Contribute to the execution of annual audit plan for all operations and/or lead some of the projects focusing on IT controls.• Conduct interviews with business managers to understand their business processes, identify inherent risks, and mitigate IT controls.• Contribute to the development of audit programs.• Perform testing of IT application controls and provide opinions on their effectiveness.• Contribute to the development of agreed action plans with local management.• Develop efficiency recommendations in consultation with other audit engagement staff. • Prepare audit reports, including clearly written, concise audit observations that effectively communicate identified issues and their related corrective actions to key stakeholders.• Plan and deliver IT audits covering a range of general IT controls, applications, underlying infrastructure, and technologies supporting business processes across the entirety of the business.

Houston, Texas, United States

• Responsible for performing testing around assigned audit programs for relevant risk areas. Worked with the Director of IT Audit to ensure audit procedures is sufficiently addressed to identify risks and provide reporting of testing results.• Performed testing over necessary IT General controls to satisfy SOX testing requirements of the company's in-scope systems at all company facilities, tracked the completion of such testing to ensure it is completed on time.• For identified findings, assisted with providing feedback for corrective action for deficiencies noted. When necessary, follows up to ensure deficiencies are remediated and supports the external auditors by performing reliance testing for the external audit firm.• Assisted in various compliance efforts and adherence to documented policies and procedures including SSAE 18 SOC 1 and 2 reports, Data Privacy and Protection.• Supervise IT audits related to IT general controls, information security, pre/post system implementations, IT governance, and operational areas.• Performed multiple audits from planning to reporting and review tasks by audit staff.• Document management processes and test IT controls through walkthroughs, observation, and inquiry.• Identified risks and key control activities and drove process improvement.• Prepared high-quality written communications, including audit reports, that document the scope, procedures performed, findings, and conclusions.• Worked closely with the external auditors to align on scope, timing, reliance approach, and delivery of working papers.