Christina Duffy

WORK HISTORY

EDUCATION

SKILLS

ABOUT CHRISTINA DUFFY

As a Director within Grant Thornton\'s Risk Advisory Services division, I work with public and private companies in various industries, including Asset Management, Financial Services, Health Care, Loan Servicing, and others. My experience has primarily consisted of process and IT internal controls over financial reporting (including System and Organization Control (SOC) engagements and other risk-related engagements), loan servicing, and internal audit in various industries.I have led and managed multiple internal controls engagements evaluating the design and operating effectiveness of controls around financial reporting in various industries. I have also led Grant Thornton engagement teams that conducted internal controls engagements around the client’s non-financial reporting controls as they related to security, availability, and privacy. The control activities included a diverse range of activities including monitoring activities, logical and physical access controls, systems operations, risk assessment, risk management, availability, confidentiality, approvals, authorization, verifications, segregation of duties, and change management.In addition, I have managed and executed risk assessments to help identify risk exposure from compliance, operational, and information technology standpoints and assessed the risk, status, and action plan for all identified deficiencies. I have executed and documented key control procedures covering design and operating effectiveness for entity level, ITGC, and business process controls. I was also responsible for conducting documentation quality inspections for the engagement team.Lastly, I am a Certified Information Systems Auditor (CISA) and a member of the Information Systems Audit and Control Association (ISACA) and the Institute of Internal Auditors (IIA).