Resume

Question 1

IT Auditor for Amegy Bank

Answer 1

I execute IT General Controls (ITGCs) and IT application controls (ITAC) testing for design appropriateness and operating effectiveness.

Perform SOC 1, 2 & 3, review SOC 1 Type 2. Knowledge in SSAE18 and GDPR.

Perform SOX compliance testing ensuring that risks are identified and mitigated to the management acceptance level.

Competent in all stages of IT audit process (planning, fieldwork, reporting and follow-up)

Question 2

Staff Auditor

Answer 2

I conducted testing of SOX. Review of ITGCs and IT Applications, database and operating systems.

Document control weakness relates to testing expectations.

Document work completed by preparing work papers.

Handled of special projects such as Segregation of Duties and SOX compliance business.

Question 3

Technical Analyst

Answer 3

Resolved SeviceNow trouble tickets for users utilizing phone, email, and remote tools, expediting resolution through troubleshooting and knowledge base searching.

Managed user accounts within ActiveDirectory and on UNIX platform - user creation / deletion, granting permissions, and administrative VPN access.

Question 4

I have more than three years of experience in data privacy and compliance services with companies in the life sciences, manufacturing and distribution, and high-tech industries. Within these industries, her work includes providing operational support for privacy programs, consulting on compliance-related matters, implementing privacy platforms, and assessing internal processes through gap or readiness assessments.

I am knowledgeable on the GDPR (General Data Protection Regulation), CCPA (California Consumer Privacy Act), and other newly passed regulations.

I have performed data privacy gap assessments of client policies and procedures to assess the robustness of their internal privacy framework and compliance with applicable regulations. In doing so, I was able to identify high-risk areas in the client’s framework and proposed solutions to close existing gaps.

Other privacy-related services include creating privacy questionnaires, interviewing business process owners, operationalizing consumer requests, and implementing privacy software.

Answer 4

My background includes testing financial and operational controls for design and operating effectiveness of key controls and non-key controls, assisting with account reconciliations, updating walk through documentation, and reviewing risk matrices.

Throughout my career, I have worked on different types of IT audits at a broad range of companies and includes testing IT general controls (IT SOX testing) at small to mid-size companies and testing operating effectiveness of in-scope systems at large global entities.