Anjum User

Led global IT Audit, SOX, and advisory engagements, managing audit planning, execution, reporting, and stakeholder management across multiple regions. Directed ITGC, ITAC, SAP Security, and cybersecurity audits and helped standardize audit methodologies to improve audit quality and consistency.

Delivered IT audit engagements aligned with SOX 404, SOC 1/SOC 2 (SSAE 18), and ICFR, managing end-to-end delivery and reporting. Conducted ITGC, ITAC, SAP Security, and ERP controls reviews and recommended control optimization and remediation strategies.

Executed IT audits including SOX and ISO 27001 control testing and supported remediation planning to strengthen the control environment. Performed application security, user access reviews, and Segregation of Duties (SoD) assessments and prepared audit workpapers and reports.

Performed IT General Controls (ITGC), SOX, and SOC 2 control testing across information systems and collaborated with process owners to evaluate control design and operating effectiveness.

Managed end-to-end IT audit engagements and performed ITGC, SOX, SOC 2, ITAC, and infrastructure audits to evaluate control design and operating effectiveness. Used Excel and SQL for data analysis to identify trends, anomalies, and control gaps and documented risk-based audit procedures.

Conducted vulnerability assessments using Rapid7 Nexpose and supported configuration compliance scanning with CCM to identify non-compliant systems. Performed ICFR and ITGC assessments, built dashboards and compliance reports, and automated weekly reporting using Excel macros to improve risk remediation visibility.

Grade: 89.80

Completed a B.Tech in Computer Science and Engineering at Amity University from 2012 to 2016, achieving a score of 89.80.