Assess the adequacy and efficiency of technology controls across cybersecurity and IT risk areas.
Plan, draft, and execute internal audit programs, including risk and control matrices and test procedures.
Evaluate cybersecurity processes such as data loss prevention, threat intelligence, vulnerability management, incident management, cyber resiliency, social engineering, and external threats.
Audit IT infrastructure including firewalls, IDS/IPS, logging, monitoring tools, and cloud security.
Use automated audit tools for planning and execution.
Participate in regulatory compliance audits (e.g., RegSCI) and business/operations audits.
Prepare detailed audit reports and supporting documentation for management.
Collaborate effectively with global teams (USA and EMEA).
Drive continuous auditing, monitoring, and risk mitigation activities.
