Senior IT Auditor Resume Samples

Description :

1. Planned, determined scope and objectives of the audit, wrote audit programs, and discussed audit recommendations with auditee management.
2. Supervised and mentored juniors auditors assigned to the audit.
3. Participated as an auditor or auditor-in-charge in approximately 30 I.T. or operational audits, or system development life cycle reviews, within the banking industry.
4. Audits centered on the review of business/IT managerial controls.
5. Functioned as an internal auditor and information security professional on the global Information Technology Technical Team of General Motors Audit .
6. Performed information technology audits of state agencies. Lead audit teams in the audit, analysis, and testing of information technology security controls across all layers of computing environments such as physical, operating system, network, and application layers as well as end-user processes and security.
7. Planned audits, developed audit plans and programs, supervised and reviewed audit team work, documented the results of audits in applicable reports, and presented audit results as needed to interested parties.

Experience

5-7 Years

Level

Executive

Education

MBA In Finance & Management

Description :

1. Conducted annual Federal Information Security Management Act (FISMA) reviews on the Department's information systems.
2. Developed Audit plans and assessed the IT control environment using FISCAM.
3. Worked with senior management, audit teams, and other internal and external teams to accomplish audit work.
4. Identified vulnerabilities to protect the integrity and improve the Department's programs and operations.
5. Performed database vulnerability scans of the Department's database servers.
6. Performed IT general and security control audits under GAGAS standards.
7. Conducted interviews with Department officials and system contractors to gather information needed to complete an assessment of the Department's network/systems.

Experience

5-7 Years

Level

Executive

Education

B.S.B.A. In Finance/Marketing

Description :

1. Evaluated the effectiveness of internal controls to ensure clients' compliance with Sarbanes-Oxley requirements.
2. Assisted clients with the development of strategies to mitigate security risk from an IT perspective.
3. Planed, Lead and Executed audits to ascertain that client's applications are in compliance with the corporate security policy.
4. Prepared finalized reports per evidence obtained, audit results, and finalizing client responses to observations noted.
5. Included providing remediation and mitigating controls to address issues noted during the audit procedures.
6. Built and developed strong relationships with Client management contacts across multiple industries and service lines.
7. Lead client engagements as well as the responsibility for on-time creation of project deliverables.

Experience

10+ Years

Level

Senior

Education

MSc In Accounting

Description :

1. Performed the IT portion of federal financial statement audits using applicable OMB, GAO, NIST, COBIT & AICPA guidance.
2. Tested areas include entity-wide security program controls, access controls, change controls, segregation of duties controls, service continuity controls, and system software controls.
3. Agencies included the House of Representatives, Small Business Administration (SBA), Government Accountability Office (GAO), Federal Reserve Board (FRB), and Millennium Challenge Corporation (MCC).
4. Managed up to two individuals as a Senior IT Auditor.
5. Performed information security reviews for federal agencies using Federal Information Security Management Act (FISMA) and NIST SP 800-53 Recommended Security Controls for Federal Information Systems guidance.
6. Responsible for assisting management in the completion of the FISMA template required for annual submission to OMB.
7. Assisted the General Services Administration (GSA) in implementing requirements of OMB Circular A-123, Appendix A, Internal Control over Financial Reporting, through evaluating general controls over the information systems using NIST's Special Publication (SP) 800-53A, Guide for Assessing the Security Controls in Federal Information Systems.

Experience

2-5 Years

Level

Executive

Education

BS

Description :

1. Worked as a senior Auditor (consultant) in the Enterprise Risk Services department providing end-to-end external audit services to large corporations.
2. Conducted multiple external audits simultaneously under strict deadline Developed audit programs and testing procedures relevant to risk and test objectives.
3. Identified and communicated issues raised, offering recommended solutions relevant to business and risk Supervised junior auditors assigned to engagements providing guidance and overall review of deliverables Support the ERS practice through development of new services and analytical tools and fulfilment of practice management responsibilities Participated in special audit projects and provide advisory and consulting services to management.
4. Recommended appropriate staffing requirements to complete the audit.
5. Trained and provided guidance of auditing tasks and procedures.
6. Reviewed work for completeness; and submited evaluations on assigned auditors.
7. Acted as liaison for internal management, external auditors, external audit clients and business associates.

Experience

2-5 Years

Level

Executive

Education

Computer Programming

Description :

1. Lead and/or support comprehensive security, risk and vulnerability assessment engagements and recommend remediation implementation for government clients.
2. Directed application security evaluations, penetration testing, network vulnerability assessments and security/assurance audits of networks, systems, applications, platforms, databases and operating procedures to ensure security of infrastructure and information assets; oversee audits for FISCAM, FISMA and SSAE16 compliance.
3. Partnered with client senior business and IT leaders to provide security guidance, identify and prioritize security-related requirements and facilitate delivery of information security services.
4. Reviewed audit findings and reports of junior associates; interface with clients to deliver audit results.
5. Managed client engagements, including gathering client data, project planning, internal control reviews (forensic analyses), testing, reporting and results delivery/closeout.
6. Directly audited various areas of configuration management, access control, security management, segregation of duties, business continuity, contingency planning, business processes, plans of actions & milestones, continuous monitoring and physical security.
7. Consistently exceeded goals in client engagements; built a strong referral and repeat client base through developing scalable security and risk management processes and meeting deadlines.

Experience

10+ Years

Level

Senior

Education

Bachelor Of Science

Description :

1. Pulled service tickets for change control and operations testing to support IT SOX compliance.
2. Pulled service tickets for employee samples that were new hire and terminations for logical access to SAP, Mainframe, AS400 and Windows applications to support IT SOX compliance testing.
3. Reviewed super users against job descriptions that were assigned to Windows, DB2, SQL and UNIX platforms to support IT SOX compliance testing.
4. Reviewed UNIX /etc files for security setting on sampled Unix Platforms to support IT SOX compliance testing.
5. Created work papers to capture findings for the IT SOX audit.
6. Up loaded work papers into GRC database for review and sign off.
7. Pulled service tickets for change control and operations testing to support IT SOX compliance.

Experience

7-10 Years

Level

Management

Education

Project Management

Description :

1. Performed and lead various information system audits that support the firm's core business functions including: electronic brokerage, execution, and clearing services on approximately 70 financial and commodities exchanges around the globe.
2. Defined appropriate audit scopes, preparing complete and accurate work paper documentation, assessing results, and preparing recommendations for improvements.
3. Interacted with firm personnel to provide/receive necessary information so as to ensure the timely completion of system audits.
4. Followed up on all outstanding audit findings to ensure they are appropriately resolved.
5. Developed risk assessment/analysis, internal control evaluations, and other processes necessary to determine areas of technology risk or weakness that will lead to the development of audit programs.
6. Produced the audit report (within agreed time scales), agree with clients on factual accuracy of the report findings and recommendations and obtain initial management responses and recommendation implementation dates.
7. Acted as a center of expertise (maintain knowledge of and develop an approach) for own area of attention (account management) and contribute to the contents of knowledge databases Act as a point of contact and sparring partner for the assigned areas.

Experience

2-5 Years

Level

Executive

Education

Masters In Computer Science

Description :

1. Identifies over $32M in potential cost savings over a 4yr period as a result of 2012 license management audit.
2. Leads portions of the overall IT audit risk assessment and short-term/long-term internal audit plan.
3. Facilitates planning the IT and Integrated audits to determine audit scope and audit approach based on risk assessments.
4. Identifies/assesses business processes and internal control and IT risks and design appropriate audit procedures, plans, execute and wrap-up projects.
5. Manages audit teams - assign IT processes/systems to team members, ensure audit procedures address the objectives of the audit program and review required documentation for adherence to the department standards and guidelines.
6. Reviews all testing results and related conclusions.
7. Creates and reviews draft audit reports, work with management to finalize issues, report content and remediation plans.
8. Leads advisory projects to improve business systems/processes, identification of emerging risks and make recommendations to improve the control design and operating effectiveness/efficiency or comply with company policies and legal/regulatory requirements.
9. Demonstrates in-depth understanding of complex information systems.

Experience

10+ Years

Level

Senior

Education

Bachelor Of Arts In Accounting

Description :

1. Lead the update and administration of all Sarbanes-Oxley requests.
2. Implemented and managed quarterly user access review to achieve compliance with Sox/PCI standards.
3. Implemented and managed SQL/Oracle database access review.
4. Determined and communicated enterprise information security direction and standards based on company goals and external compliance requirements.
5. Coordinated business units and IT Staff to test and report on the adequacy and effectiveness of IT Sox controls.
6. Implemented controls needed to protect both company information as well as information that is entrusted to the company by third parties and customers.
7. Developed, implemented, and maintained policies and procedures to meet information security and compliance standards.

Experience

2-5 Years

Level

Executive

Education

BS In Computer Science