Razi Anwar

About Razi Anwar

I am a Senior IT Auditor at Exeter Finance with a strong focus on IT Audit, Information Security, and risk management. In my current role, I assess the design and operating effectiveness of IT General Controls (ITGCs), application controls, interface controls, and Information Produced by the Entity (IPE) to support SOX compliance and internal audit objectives across complex IT environments.My responsibilities include evaluating controls related to user access management, change management, IT operations, and application-level automated and manual controls, as well as validating the completeness and accuracy of reports and data used in control execution. I regularly collaborate with IT, security, and business stakeholders to identify control gaps, assess risk impact, and support remediation efforts.In addition to SOX audits, I actively perform multiple internal audits, including Firewall Audits, Vulnerability Management and Patch Management reviews, and Software License Audits, assessing security configurations, remediation processes, and compliance with internal policies and industry standards. To expand my expertise in information security and cloud environments, I have completed ISO/IEC 27001 Lead Auditor training and Microsoft Azure Fundamentals.Earlier in my career, I supported IT General Controls testing during an IT Audit internship at Vistra Corp, including user access reviews, user provisioning, and password management, which established a strong foundation in SOX and control assurance activities.Before transitioning into IT Audit, I worked in roles focused on physical security and safety systems, contributing to the implementation and oversight of fire alarm systems, fire suppression systems, biometric access controls, and intrusion detection solutions. This background provides me with a holistic perspective that bridges physical and information security controls.I am a motivated, detail-oriented professional who enjoys working at the intersection of technology, risk, and compliance to strengthen organizational control environments.Certifications:CISA (Passed)| CompTIA Security+| Certified in Cybersecurity – (ISC)² | AWS Certified Solutions Architect – Associate | AWS Certified Cloud Practitioner | ISO/IEC 27001 Lead Auditor (Training Completed)| Microsoft Azure Fundamentals (Course Completion)Technical Skills:• Programming: Python• Operating Systems: Windows, Linux, Kali Linux• Databases: Microsoft SQL• Audit & Analytics: ACL Analytics, IDEA Analytics, Power BI

Experience

1. Senior IT Auditor

   Exeter Finance

   Oct 2024 — Present · Irving, TX, US

   Projects Worked on- Logical Access Audit- Software Licensing Audit- Dialer Management AuditVulnerability & Patch Management AuditPerformed audit of Vulnerability & Patch Management program covering 50 servers, 100 applications, and PCs; evaluated timeliness of patching, prioritized high-risk vulnerabilities, and assessed remediation tracking and metrics.

Skills

• Commissioning
• Microsoft Word
• Customer Service
• Plc Scada
• Wire Drawing
• Leadership
• Powerpoint
• Microsoft Excel
• Project Management
• Microsoft Office
• Project Engineering
• Engineering
• Electrical Engineering
• Management
• Project Planning
• Research
• Autocad