Sandra I.

Sr IT Auditor Risk Analyst @Bank of America

IT Auditor / Risk Analyst | Current RoleConduct IT audits to evaluate control design and effectiveness, ensuring compliance with SOX, SOC, and internal policies.Perform risk assessments of systems, applications, and processes to identify vulnerabilities and prioritize mitigation strategies.Execute TOE and TOD testing of ITGC controls (Access Management, Change Management, IT Operations, Security, and ITAC) to validate effectiveness.Review and validate evidence provided by control owners and stakeholders, ensuring completeness, accuracy, and compliance.Monitor and report on IT risks related to cybersecurity, access management, and data protection, supporting proactive risk management.Prepare clear and actionable audit reports for leadership, highlighting key risks, control gaps, and recommendations for improvement.Manage all phases of the audit process, including planning, fieldwork, reporting, and follow-up on corrective action plans.Partner with cross-functional teams to investigate root causes, track remediation efforts, and confirm timely resolution of audit findings.Develop and maintain issue remediation plans, monitoring corrective actions to ensure effectiveness and alignment with regulatory standards.Support continuous improvement by recommending process enhancements, streamlining workflows, and strengthening the overall control environment.