New York, NY, US
Summary
Led comprehensive IT audit and compliance initiatives, enhancing control environments and ensuring adherence to global regulatory standards for a Fortune 500 technology firm.
Highlights
Directed 10+ annual IT General Control (ITGC) and application control audits for critical financial systems (SAP, Oracle), identifying 20+ high-risk vulnerabilities and driving remediation efforts to achieve 100% compliance with SOX requirements.
Developed and implemented a robust GDPR and CCPA compliance program, resulting in a 30% reduction in data privacy risks and successful certification across 5 international business units.
Conducted enterprise-wide risk assessments and gap analyses against NIST and ISO 27001 frameworks, guiding the implementation of 15+ new security controls that strengthened the overall information security posture.
Streamlined audit methodologies and reporting processes utilizing GRC platforms (e.g., Archer), improving audit cycle efficiency by 25% and enhancing executive-level visibility into compliance status.
Collaborated cross-functionally with IT, Legal, and Business Operations teams to translate complex regulatory requirements into practical, actionable controls, reducing potential non-compliance fines by an estimated $2M annually.
Managed external audit relationships, facilitating seamless data requests and control walkthroughs, which contributed to unqualified audit opinions for 3 consecutive fiscal years.