Visual studio
Ayman Drabu
IT Auditor
Gachibowli
Summary
Overall 3 years in IT General Controls as IT Auditor in ITGC, SOX404, ISO27001 & ITAC
Experience with fieldwork stage Audit which includes Identifying, Planning, execution/evaluation, reporting and testing areas of ITGC Controls.
Worked on ITGC and ITAC Controls throughout various sectors and in following domains:
Logical access Controls, Change Management Controls and Operation Controls like Backup and Recovery, Incident Management, Job Monitoring, Patch Management, IT Compliance, Computer Operation and Database.
Overview
2
2
years of professional experience
4
4
years of post-secondary education
2
2
Languages
Work History
Associate 1
KPMG Global Delivery Center Private Limited
Hyderabad
07.2023 - Current
● Conduct external audit in accordance with the PCAOB (Public Company Accounting Oversight Board) Auditing Standards.
● Assist team in conducting Process understanding discussions with the Clients as part of assessing risks arising from their use of Technology and identify control gaps within their processes.
● Assist team in evaluating and documenting the design and operating effectiveness of technology controls GITCs and ITACs) pertaining to Client’s Internal Controls over Financial Reporting.
● Assist team in performing SOC 1 and SOC 2 (System and Organization Controls) SSAE18 assessments in accordance with the attestation standards established by the AICPA (American Institute of Certified Public Accountants).
● Assist team in completing a quality audit and track deliverable status efficiently.
Assistant System Engineer-Trainee
Tata consultancy services
Bangalore
08.2021 - 06.2023
● Performed risk identification, assessment, reporting and monitoring operations for Clients.
● Creates reports, quality checks, and maintains reports of significant risks and recommendations by weekly and monthly basis. Preparing Internal Audit report to provide support to auditors. Operating Internal Risk Tool and Audit finding tool manage reports.
● Responsible for Risk management till Remediations closures.
● Assist in kick-off, status, and closing meetings with engagement team and client and contribute to IT Audit knowledge base and internal practice development initiatives.
● Evaluates the effectiveness of the
company's internal control framework, addressing risks and carrying out Compassion's risk mitigation goals and objectives as well as auditing risk management compliance in field locations.
● Discuss risk assessment findings and action plans at oversight senior management meetings.
Assisting with the development of stakeholder communications, e.g., reports, security presentations, executive - Level briefings, etc
Education
BTech - Computer Science Engineering
Chandigarh Group of Colleges, Mohali
Chandigarh 06.2017 - 04.2021
Skills
Risk mitigation
Data analysis
Problem-Solving
Root Cause Analysis
Control testing
Internal control management
Testing understanding
Additional Information
- Managing GRC (Governance, Risk Management and Compliance Management), Vulnerability management, Co-ordinating and executing ISO/IEC 27001:2013 Audit and User review access management. Performed risk identification, assessment, reporting and monitoring operations for United Service automobile association (USAA) Creates reports, quality checks, and maintains reports of significant risks and recommendations by weekly and monthly basis.
- Preparing Internal Audit report to provide to auditors. Operating Internal Risk Tool and Audit finding tool manage reports. Responsible for Risk management till Remediation's closures.
- Assist in kick-off, status, and closing meetings with engagement team and client and contribute to IT Audit knowledge base and internal practice development initiatives. Evaluates the effectiveness of the company's internal control framework, addressing risks and carrying out Compassion's risk mitigation goals and objectives as well as auditing risk management compliance in field locations. Discuss risk assessment findings and action plans at oversight senior management meetings.
- Assisting with the development of stakeholder communications, e.g., reports, security presentations, executive - Level briefings, etc. Prepared audit reports, detailing results of audits and provided recommendations for remediation, as well as follow up review of corrective action plans CAP. Assist in managing the Risk Acceptance, Validation and Target Date Extension procedures.
Software
PowerBI
SQL
Advanced Excel
Accomplishments
- Coordinated Weekly Team meetings as lead, resulting in improved communication and better overall work relationship.
- Took on Tasks originally assigned to peers to decrease their workload, completing them within expected time constraints.
Awards
- Busy Season Calmer of the Storm Award in 2022 by KPMG
- Rising Star Award 2023 by KPMG
- On Spot Award by Tata Consultancy Services
- Kudos Award 2023 by KPMG
Tools
- Metric Streams
- KcW/Clara
Timeline
Associate 1
KPMG Global Delivery Center Private Limited
07.2023 - Current
Assistant System Engineer-Trainee
Tata consultancy services
08.2021 - 06.2023
BTech - Computer Science Engineering
Chandigarh Group of Colleges, Mohali
06.2017 - 04.2021