Open to opportunities

Christian Kyle Danao

@christiankyledanao

Message

IT and Risk professional specializing in IT audit, risk assessment, and control testing.

Philippines

Message

What I'm looking for

I seek a role focused on IT audit or information security risk where I can lead control testing, mentor teams, and strengthen compliance and vendor risk programs.

I am an IT and Risk professional with extensive experience in IT audit, ITGC testing, and information security risk assessments across financial and enterprise clients.

I have led advisory engagement teams, mentored staff, and managed Internal Audit ITGC functions while performing SOC report evaluations and vendor risk assessments for large organizations.

My background includes hands-on testing of Change Management, Identity and Access Management, Platform Security, and Security Monitoring, plus contract review and risk memos for third-party vendors.

I bring a pragmatic, controls-focused approach to reducing information risk, improving SOx and compliance posture, and translating technical findings into actionable recommendations.

Experience

Work history, roles, and key accomplishments

Current

IT Audit Managing Consultant

Current

Punongbayan & Araullo (P&A) Grant Thornton

Oct 2025 - Present (4 months)

Manages advisory engagement teams for internal audit clients, leads Internal Audit ITGC for the firm, mentors staff on ITGC and risk identification, and produces business proposals based on analysis of client processes.

ITGC Internal Audit Risk Assessment Team Leadership IT advisory Stakeholder Management SOX Compliance

Information Security Risk Consultant

Optum Global Solutions (UnitedHealth Group)

Jan 2025 - Sep 2025 (8 months)

Performed information security risk assessments of UnitedHealth Group suppliers, vendors, and subsidiaries through walkthroughs and stakeholder interviews, producing findings and remediation recommendations.

Risk Assessment Vendor Risk Management Information Security Report Writing Controls Testing

IT Key Control Tester

ING Business Shared Services B.V. Branch

Jun 2022 - Jan 2025 (2 years 7 months)

Led security monitoring for Wholesale Banking Circle and performed ITGC testing (change management, IAM, platform security, monitoring, resilience), updated test scripts, reviewed peers' work, and advised DevOps on SOx compliance.

ITGC Change Management Identity And Access Management Security Monitoring SOX Compliance Test Script Development

Vendor Information System Analyst

Manulife Business Processing Services

Jun 2021 - Jun 2022 (1 year)

Conducted vendor information system risk assessments for John Hancock suppliers, documented findings in Risk Memos, and reviewed contracts to ensure inclusion of required security controls for business acceptance.

Vendor Assessment Contract Review Information Security & Compliance Third Party Controls

IT Auditor

Ernst & Young Philippines

Aug 2019 - Jun 2021 (1 year 10 months)

Performed SOC report evaluations, ITGC and ITAC testing, infrastructure reviews, and code/script reviews (Python, SQL, MySQL) to identify risks and recommend mitigation for Fortune 500 clients.