Brenda Morales

WORK HISTORY

EDUCATION

ABOUT BRENDA MORALES

I have over 9 years of experience in performing and leading IT audits for various clients in the manufacturing, engineering, and technology sectors. I hold the Certified Information Systems Auditor (CISA) credential, which demonstrates my proficiency and knowledge in IT governance, risk, and control.My core competencies include SOC reporting, SOX compliance, internal audit, SAP GRC, and project governance. I have successfully delivered SOC 1 and SOC 2 reports and pre-assessments, as well as supported the core financial audit by assessing logical access, change, and operations controls. I have also leveraged my internal audit skills to evaluate and improve the IT-related processes and controls at a local greeting cards company, where I worked on various projects such as an SAP implementation, SOD access controls, and SOC report review process.My mission is to provide high-quality and value-added IT assurance and advisory services to my clients, by applying the best practices and standards in the industry. I am passionate about learning new technologies and staying updated on the latest trends and developments in the IT risk field. I also enjoy mentoring and coaching junior staff, and sharing my insights and experiences with them. I am proud to be part of the EY team, where I can contribute to the organization\'s vision and values, and collaborate with talented and diverse professionals.When not at the office you can find me walking my dachshund, Chavela, rolling dice in a D&D campaign, working up a sweat at pilates, or hitting the sand volleyball courts all year round!