IT Auditor Resume Samples

Description :

1. Responsible for the management and delivery of IT and business process audits to ensure business risks were recognized and appropriately managed before the company was adversely affected.
2. Performing data analysis and researching within the SAP systems and interpret data to strategically support business needs.
3. Reassessing the controls and deficiencies and retesting all the identified key controls within SOX guidelines.
4. Performing SAP audits and conducting pre and post SAP implementation reviews.
5. Assessing IT control elements to mitigate IT risks regarding the confidentiality, integrity, and the availability of business information.
6. Reviewing the systems for IT general controls, risk and compliance with policies and regulations.
7. Engaging in ongoing communication with cross-functional partners to ensure companywide understanding of IT goals, soliciting feedback and fostering cooperation.
8. Identifying and evaluating the risks during review and analysis of system development life cycle (SDLC), including Design, Testing/QA, and Implementation of systems and upgrades.
9. Performing general computer controls review to verify compliance with SOX section 404.

Experience

7-10 Years

Level

Management

Education

BS

Description :

1. Planned and managed the ITGC audit functions using best practice audit guidelines in compliance with COSO and COBIT standards.
2. Knowledge of vulnerability assessment of operating systems (Unix/Linux, Windows).
3. Conducted walkthrough, formulated test plans, documented gaps, tested the results and exceptions.
4. Performed assessment of IT internal controls as part of the compliance and operational audits.
5. Identified and communicated audit findings to senior management and client.
6. Implemented process improvements to SOX testing, resulting in efficiency in review time and desirable financial reporting.
7. Knowledgeable in ERP (SAP) business processes and testing of relevant controls.
8. Performed all stages of the audit including, planning preparing the audit program, fieldwork executing, reporting and follow up.
9. Reviewed SDLC, designed, and implementation of process and automated controls, data created final audit reports and oversaw the implementation of creative action plans while maintaining communication with all levels of management.
10. Met with plan owners and company client to remediate audit findings/exceptions and as follow up to ensure system security.
11. Performed assessments of application controls and IT general controls such as access control, change management, operations, disaster recovery and job scheduling.
12. Supported the development, implementation, and monitoring of data confidentiality, system integrity, system reliability, recovery methods and procedures.

Experience

2-5 Years

Level

Junior

Education

Diploma

Description :

1. Performing internal and external IT risk assessments, conducted GAP analysis against the industry standards and providing recommendations on mitigation options.
2. Performing consulting for business in establishing IT compliance solutions based on company policies and standards, industry best practices, industry standards, and regulatory requirements.
3. Conducting reviews to identify risk areas and establish a protocol.
4. Liaising with IT and Business Management on issues remediation, process, and control improvements.
5. Involving as a member of the team responsible for planning SOX 404 and other operational and infrastructural audit.
6. Performing and testing IT general and operational controls audit for Sarbanes-Oxley and SAS70 compliance.
7. Evaluating IT control, analyzing and assessing IT controls, risk mitigation, security, compliance, including the entire IT audit process.
8. Working with the audit project team to achieve departmental goals and to ensure awareness of changes in business activities and objectives.
9. Performing audit follow-up activities to test the implementation of managements responses to audit findings.

Experience

10+ Years

Level

Consultant

Education

MS

Description :

1. Performing audit scheduling, audit planning (developing scope, purpose, and risk assessment), fieldwork (interviews, surveys, control design analysis, control testing, and reviewing/analyzing audit evidence and working papers), and reporting of issues noted during the audit (defining issues and recommendations).
2. Communicating effectively with all levels of management to ensure full understanding of IT objectives, risks, and controls.
3. Tracking the results of prior audits and facilitating appropriate corrective action.
4. Performing risk assessments, including identification, evaluation and documentation of IT business risks and controls.
5. Reviewing work papers and reports, documenting and analyzing the audit evidence.
6. Reviewing the company business continuity plan to determine the business strategy, the risks and the impact of unexpected disruptions.
7. Reviewing and testing for segregation of duties (SOD) and accessing control in application to ensure compliance with SOX.
8. Implementation and assessment of security and business process control in the application including segregation of duties, structural authorizations, access restrictions, role and profile assignments.
9. Testing application controls, including both logical and physical access, controls to ensure the effectiveness of functionality, good reporting, and interfaces.

Experience

5-7 Years

Level

Executive

Education

BS

Description :

1. Assisting in the execution of the annual internal audit plan as directed and preparing reports to communicate audit results to management and making recommendations as appropriate.
2. Advising the management on recommendations for improvements in controls, processes, systems and assist co-source auditors as appropriate.
3. Coordinating the improvement recommendations with external parties and liaising with accounting and finance staff to implement changes.
4. Performing infrastructure audit - O/S, active directory, server, and databases etc.
5. Evaluating the IT infrastructure in terms of risks to the organization and establishing controls to mitigate loss.
6. Performing IT general controls audit and IT application controls testing and risk-based IT audits in core IT functions.
7. Providing independent audit support in conjunction with the company SOX 404 assessment.
8. Testing and documenting the financial and information systems for data integrity and quality.
9. Assisting in the preparation and periodic review of a comprehensive company risk assessment.

Experience

2-5 Years

Level

Junior

Education

BS

Description :

1. Met the business process and controls owners to document the respective IT and business processes to understand and document the process for SOX 404 compliance.
2. Obtained and reviewed the documentation around purchasing, inventory, sales, and finance to the understand the risk point within the process.
3. Evaluated control design effectiveness via walkthroughs from end to end to determine the design effectiveness of the controls.
4. Reviewed and updated IT process documentation to evaluate currency and pertinence and also gain sufficient understanding of the risks.
5. Reviewed internal policies, procedures, and standards to validate that managements directives have been appropriately captured and formalized to mitigate risks and achieve compliance and reporting objectives.
6. Performed business process testing of controls around access provisioning and user security, system configuration management, program change management, business continuity, and segregation of duties in the SAP and CMS systems.
7. Performed ITGC control testing within the access provisioning, program change management, program development and computer operations domains.
8. Performed testing of technical control on the AS400, DB2, and Windows platform to verify appropriate security have been configured and is operating effectively to safeguard it data and systems.

Experience

7-10 Years

Level

Senior

Education

BS

Description :

1. Assisting in all phases of internal audit assignments including planning, execution, reporting and follow up.
2. Perform ITGC to verify compliance with SOX provisions and professional standards around areas of change management, logical access including backup and recovery, job scheduling, problem and incident management.
3. Testing of IT infrastructure (databases and operating systems) and application controls.
4. Participating in the review management's work, assessing the operating effectiveness of the SDLC lifecycle, identifying risks and gaps in the implementations, communicating issues, and recommendations to the parties involved.
5. Perform PCI DSS and HIPAA audits on hospitals and health insurance providers.
6. Performing risk-based audits of IT general controls (access control, change management, and IT operations) and application controls.
7. Performing routine audits (quarterly, semiannual and annual audit) of company internal controls to mitigate risk.
8. Performing IT infrastructure audit of databases, servers, networks etc.
9. Conducting audits of operating system (OS) platforms, information technology, and operating procedures in accordance with established standards for efficiency, accuracy, security and risk mitigation.

Experience

5-7 Years

Level

Executive

Education

BS

Description :

1. Conducting audits of information technology (IT), operating system (OS) platforms and operating procedures in accordance with established standards for efficiency, accuracy, security and risk mitigation.
2. Providing independent audit support in conjunction with the company's sox 404 assessment.
3. Interpreting the federal, state and/or international regulations as they apply to information systems, platforms, operating processes, practices, and procedures.
4. Evaluating the IT infrastructure in terms of risks to the organization and establish controls to mitigate loss.
5. Determining and recommending the improvements to enterprise risk management controls.
6. Supervising the engagements by planning audits, reviewing work papers, supervising early career auditors, and preparing audit reports.
7. Responsible for identifying outdated process controls and implementing corporate policy/procedure statements to reflect industry best practices.
8. Managing the project status, facilitating audit status meetings to communicate findings, issues, and areas for improvement to client management, executive leadership, and corporate internal audit leadership.

Experience

5-7 Years

Level

Executive

Education

BS

Description :

1. Establishing IT compliance framework covering the IT platform applications, processes,  and procedures to ensure compliance with industry standards and best practices.
2. Reviewing and testing users access control - physical access relating to server room or data center, and logical access control relating to various applications, operating systems, database, networks, and windows active directory.
3. Performing review and testing IT controls such as incident management, change management, segregation of duties, data integrity.
4. Performing review of organizational IT policies, standards, procedures and provides advice on their adequacy, accuracy, and compliance with government guidelines and regulatory requirements.
5. Evaluating the organization's disaster recovery readiness - DR plan, business impact analysis (BIA), annual testing, site adequacy.
6. Assisting the management in the identification and assessment of technology related risks, reported risk-based controls adequacy.
7. Evaluating the technology and business related controls for integrated IT and business auditing efforts.
8. Coordinating and executing the projects and ensuring security risks/vulnerabilities are identified, communicated and remediated.
9. Measuring the adequacy of the quality of IT service delivery, through the review of key controls in incident management (help desk), problem, and release and change management.

Experience

5-7 Years

Level

Senior

Education

BS

Description :

1. Participating in all phases of IT audit - planning, fieldwork and follow up using the applicable framework.
2. Performing audit of IT infrastructure and applicable database- operating system, Unix, Mainframe, SQL, Oracle, and DB2.
3. Documenting control weaknesses related to testing exceptions and assisting in preparing draft audit reports to communicate findings and recommendations to senior management.
4. Actively participating in conducting information technology (IT) controls audit and review related compliance with section 404 of the Sarbanes-Oxley Act, and test the adequacy of internal controls in the following areas: information access, change management, information technology operations, and segregation of duties.
5. Assisting in the implementation of control, self-assessment (CSA) tools, automated audit techniques and an integrated audit approach designed to encompass financial, operational and information technology control.
6. Conducting and assisting in post audits to determine if corrective action has been taken.
7. Reviewing the adequacy of data integrity controls with a focus on application control procedures that are designed and implemented to ensure transactions are completed and accurately fed and properly processed by the applications.
8. Ensuring that industry standards "strong password algorithm" is being deployed on network and business application. Ensuring access privileges and permission are on a need-to-know basis.

Experience

5-7 Years

Level

Executive

Education

BS