04/26/2024 updated
HA
100 % available
IT Audit || IT Risk Management
Netherlands
Netherlands
Post Master, Executive Programm of Digital AuditingControles de AccesoAuditingChange ManagementComputer SecurityConsultingIncident ManagementIT Risk ManagementInformation Technology AuditInformation Technology OperationsRisk AnalysisSarbanes-Oxley Act (SOX) ComplianceRisk Management
Experienced IT Auditor with 5 years of experience in conducting (operational & IT) audits and advisory work. Specialized in both testing control measures and identifying risks, as well as developing control measures to mitigate these risks. The above aspects have been performed according to ISAE3402/3000/SOC standards, SOx laws and regulations, and the SURF framework. Extensive experience within GITC domains such as Logical and Physical Access Control, Change Management, IT Operations (backup and recovery, incident management), IT Security, and Third Party Risk Management.
Experience
Professional experience5 - 10 years
Freelancer since2024
Languages
EnglishFluentDutchNative speaker
Project history
- Independently conducting IT Audits (and in a team setting), assessing design and implementation and effectiveness to ensure compliance with applicable laws and regulations and/or audit standards.
- Conducting interviews, drafting reports, discussing findings and recommendations with clients.
- Performing risk assessments and providing advice on mitigating IT risks, including developing and implementing control (GITC & Application Controls).
- Reviewing audit files/documentation following conducted audits.
- Facilitating workshops related to risk assessments and developing and implementing control for both Business and IT processes.
- Conducting interviews, drafting reports, discussing findings and recommendations with clients.
- Performing risk assessments and providing advice on mitigating IT risks, including developing and implementing control (GITC & Application Controls).
- Reviewing audit files/documentation following conducted audits.
- Facilitating workshops related to risk assessments and developing and implementing control for both Business and IT processes.
- Testing controls regarding business and IT processes.
- Taking minutes of results from interviews and drafting reports.
- Drafting process descriptions for both business and IT processes.
- Preparing workshops/presentations on risk assessments and developing and implementing controls.
- Taking minutes of results from interviews and drafting reports.
- Drafting process descriptions for both business and IT processes.
- Preparing workshops/presentations on risk assessments and developing and implementing controls.