Channel Focus IncSenior Technology Risk Analyst
Mar. 2022 - Dec. 2023Wichita Falls,Conducted comprehensive internal audit reviews focused on IT controls testing, information security compliance, post-implementation system reviews, and controls related to IT governance, management, and operations. Supported SOX ITGC reviews across multiple clients in banking, insurance, and manufacturing sectors by effectively testing the design and operational effectiveness of key controls addressing financial processing risks. Demonstrated professional skepticism during audit walkthroughs to thoroughly understand business processes, designing and implementing internal controls during Test of Design (TOD) and Test of Effectiveness (TOE). Led the execution of multiple ISO 27001 audits, including both Stage 1 and Stage 2 assessments for two entities. Reviewed the Statement of Applicability (SoA), assessing the justifications and scope exclusions to ensure alignment with ISO 27001 standards. Evaluated the Information Security Risk Assessment processes, reviewed risk management artifacts, identified key non-conformities, and provided detailed reports with actionable recommendations to the audit team lead. Assessed documentation related to the Information Security Management System (ISMS), including scope and scope statements, engaging with senior stakeholders to verify compliance with mandatory clauses 4 to 10 of ISO 27001. Analyzed service organization control (SOC) reports (SOC 1, 2, and 3) from third-party vendors, evaluating their relevance and assurance levels based on engagement scope and criteria.