Experienced IT Auditor in the financial services industry. Adept in SOX compliance, risk assessment, GRC frameworks, and control automation. Proficient in analyzing complex IT systems to ensure regulatory compliance and mitigate risks. Effective communicator skilled at driving strategic initiatives. Sara has performed and managed risk-based IT audit and advisory services engagements such as: - IT Audit - SOC Report Review - ISAE 3402/SSAE 16 SOC 1 Type I and Type II and SOC 2 Type I - IT General Controls Review - SOX -based audit - IT Internal Audit/ Compliance Audit - CIO Advisory - Consultant specialized in System and Organization Controls (AICPA Framework) (SOC 1 & SOC 2) and ISO42001 ISO27001 standards. Conducted IT General Controls Review which includes assessment of Access to programs and data, Program change/development and Computer Operations of in-scope systems supporting key assertion level controls. Performed IT Applications Controls.