Alicia is an analytical Audit Professional with years of experience in technology, banking, and Healthcare sectors. She is someone who can communicate cross-functionally and at all levels of an organization and a creative problem solver who transforms ideas into action with systems-oriented thinking, intelligent planning, and an ability to successfully work in a team and on multiple projects.
- Performed professional internal auditing services which include information technology, financial, operational and compliance audits.
- Created IT Audit department from the ground up utilizing established frameworks and translating frameworks for respective business use. Created risk assessments based on regulatory guidance. Educating internal stakeholders including end users, steering committees and Board level on how IT audit will function as collaborators & advisors to the business.
- Identified controls, assessed vulnerabilities and risks in coordination with operations and recommending options to mitigate identified risks and controls needed.
- Led information security for all critical and significant aspects of the organization’s technology, including the control and protection of proprietary and confidential information. Utilized IT Audit skills to review all aspects, create risk assessments and recommendations for mitigation.
- Oversaw compliance with policies, practices, applicable regulatory guidance and financial services best practices for information security management and assurance.
- Developed and reviewed IT Security change management activities across the organization to ensure secure compliant information security operations.
- Researched, developed, implemented, tested, and reviewed overall information security to protect information and prevent unauthorized access.
- Directly managed the protection, defense, and availability of information and systems by ensuring confidentiality, integrity, authentication, availability, and non-repudiation through the security program.
- Created the annual internal IT audit plan (finance related) and provided input in development of the annual GRC audit plan (compliance related). Independent and objective as an extension of external audit.
- Design and implementation of SOX Controls.
- Brainstorm with clients and create leave behind easy-to-use monitoring and reporting tools.