I have several years of experience as an Information Systems Auditor. I have worked on multiple projects for various clients in different industries. My experience includes performing risk assessments, testing controls, identifying gaps and providing recommendations for improvement. I am also proficient in using audit software such as ACL, IDEA, and Excel to analyze data and identify potential issues.

I have a thorough understanding of IT general controls and their importance in ensuring the reliability and integrity of financial information. I have experience in testing IT general controls such as access controls, change management, and data backup and recovery processes. I typically use a combination of manual testing and automated tools such as audit software to test controls.

I assess and evaluate risks associated with IT systems by conducting a risk assessment. This typically includes identifying potential threats and vulnerabilities, determining the likelihood and impact of those risks, and determining appropriate controls to mitigate those risks. I also stay current with industry standards such as COBIT and NIST to ensure that my risk assessments are thorough and up-to-date.

One of the main challenges I have faced as an Information Systems Auditor is keeping up with the constantly changing technology and regulations. I stay current with industry developments and updates by attending training, workshops and conferences. Additionally, I have experience in effectively communicating complex technical issues to non-technical stakeholders.

I report on my findings and recommendations in a clear and concise manner, highlighting any significant issues and providing practical recommendations for improvement. I also ensure that my reports are compliant with professional standards such as ISACA, and that they are communicated to the appropriate individuals and stakeholders.

I stay current with industry developments and regulations by regularly reading industry publications, attending training, workshops and conferences, and participating in professional organizations such as ISACA.