
Experience
I help clients satisfy IT compliance requirements through evaluating IT general controls and IT security controls for both external audits and through the lens of an outsourced internal audit provider.
I have over 19 years of IT risk assessment, IT audit, and IT general control experience in industries including healthcare, higher education, real estate, manufacturing and distribution, and technology services. I have experience assisting clients in identifying and monitoring the effectiveness of IT control environments for Sarbanes-Oxley, FDICIA, PCI, HIPAA, ISO 27001, and NIST-800-53 compliance. My experience includes working closely with client management to evaluate the impact of IT changes on the client environment (e.g., system implementations/upgrades, transition in IT control ownership, integration of merged entities, IPO readiness), collaborate with the audit team and management to right-size the scope of the IT audit, design audit procedures in alignment with regulatory requirements, present control deficiencies with root cause statements to control owners, and facilitate executive level reporting to the audit committees and/or the board of directors.
I belong to the Institute of Internal Auditors (IIA), Information Systems Audit and Control Association (ISACA), Information Systems Security Association (ISSA), and the Project Management Institute (PMI). I received my B.S. in management/business with a concentration in Accounting from the Georgia Institute of Technology.