LEAD SENIOR SAP AUDITOR Career Focus Insightful, results-driven IT professional CISSP 6 years risk assurance advisory experience information technology security. Notable success directing broad range IT security assessments corporate initiatives participating planning, analysis, implementation solutions support business objectives. Hands-on experience leading stages system development efforts, including requirements definition, design, architecture, testing, support. Certificates Awards Certified Public Accountant (CPA) Certified Information System Security Professional (CISSP) Certificate Cloud Security Knowledge (CCSK) Certified Internal Audit (CIA) Certified Information System Auditor (CISA) Industry Proficiency certified Oil Gas Public Sector Deloitte Earned Applause awards 5 times Excellent Engagement Performance Deloitte Professional Experience Lead Senior SAP Auditor February 2014 Current Company Name City State Evaluated effectiveness corporate security policies influence best practice change utilizing root cause analysis audit results across multiple units Developed maintained standardized audit programs assess policies procedures governing corporate security, email Internet usage, access control, incident response Planned, supervised coached IT auditors assigned audits; develop managed security awareness training initiatives promote success company-wide IT compliance Developed enhanced corporate information security management framework based COBIT Prepared delivered recommendations enforcing cyber security best practices alongside executive management including CIO CFO; presented security concepts, technologies, risk mitigations business groups Identified on-board/off-board gap impacting Access Management, resolved updating organizational procedure shortfalls Advised development implementation Business Continuity Disaster Recovery (BCP&DRP) Plans 2 corporate R&D, 4 manufacture, 1 commercial site Recruited led 3 security contractors build risk assessment team charged analyzing critical infrastructure, developing reports document system vulnerabilities, recommending appropriate solutions Managed executed proactive continuous risk assessment process focusing emerging risk throughout corporation Collaborated external auditors conduct in-depth compliance audits penetration testing, presenting results senior Led internal audit exit meetings discuss findings management action plans, planned executed follow-up testing ensure action plans properly Demonstrated autonomous decision making critical thinking skills performing analytical procedures, ensuring effectiveness scope engagement Senior SAP Security Control Consultant September 2010 January 2014 Company Name City State Conducted system security assessments based NIST 800-53 public sector Generated security documentation, including: security assessment reports; system security plans; contingency plans; disaster recovery plans Provided security support evaluation development teams order integrate information assurance/security throughout System Life Cycle Development major minor application releases Configured installed GRC various clients ensured segregation duties (SOD) policies successfully highlighted mitigated, customized ruleset action permission level SOD violations Utilized Suite GRC 5.3 perform SOD analysis within Risk Analysis Remediation module (RAR), created provisioned Super User Privilege Management (SPM) roles user ID's SPM module created user access requests Compliant User Provisioning (CUP) module Designed created SAP roles including parent/derived composite single security roles, security processes user assignment workflows, custom security restrictions; investigated resolved SAP security issues creation changes security roles Leveraged SAP's profile generator authorization management tool address security defects project's testing cycles, scope change requests production support Consulted key project client stakeholders solicit business IT process control design Led control validation workshops client team members Managed integration activities across related project teams driving cross-team issue; coordinated project team leads (functional technical) SAP security team members resolve issues timely Led internal team develop Enterprise Value Delivery methodology templates SAP implementation engagements; developed training programs firm technology project standards delivered training ~200 professionals Audit Intern January 2010 August 2010 Company Name City State Assessed accessibility 2 University Texas websites accessed 30,000+ users; developed test scripts recurrently used engagements Worked closely department head deploy automated audit tool led streamlined processes Provided training sessions 7 summer interns Audit Process IT Audit Intern January 2009 August 2009 Company Name City State Worked Team Manager consolidate 3 excel reports one dashboard monitor 10-student team productivity better manage multiple audit engagements Promoted lead 10 interns assisted director manage project status Education Master Accounting (GPA 3.7) 2009 McCombs School Business; University Texas Austin; Austin, TX B.S Accounting (GPA 4.0) 2008 Jinan University; Guangzhou, China System Experience Enterprise Resource Planning (ERP) Business Solution SAP GRC 10.1, SAP ECC 6.0, SRM 7.0, EWM 9.1, Sourcing 7.0, Solution Manager 7.01, BW 7.01, BPC 10.0, PI 7.3, Model N 5.6 Quality Software HP Quality Center, Service Desk, IT Remedy, ServiceNow Platform Data Analysis MS Excel, MS Access, QlikView Hobbies Interest A serious cyclist obstacle racer competitive mindset A world traveler 25 countries 2 years Passionate house improvement projects