Looking for a job

JC Brandon

@jcbrandon

Message

I conduct risk-based IT audits and strengthen cybersecurity controls across regulated enterprise environments.

United States

Message

What I'm looking for

I'm looking to apply my IT audit, cybersecurity, risk assessment, and compliance experience to strengthen controls, identify vulnerabilities, and support effective remediation in regulated environments.

I've conducted risk-based IT audits and strengthened cybersecurity controls for Deloitte, State Farm, and Honda Financial.

At Deloitte, I evaluated SOX, NIST, ISO 27001, and COBIT compliance; reviewed access, segregation-of-duties, identity management, and cybersecurity controls; and delivered audit findings and remediation recommendations to stakeholders.

At State Farm, I supported Sarbanes-Oxley 404 testing, IT general and security control testing, audit planning, stakeholder engagements, and process improvements for critical systems and business operations.

At Honda Financial, I managed ITGC audit activities, tested application controls, evaluated disaster recovery assets, and improved audit planning by tracking prior records, contributing to a 20% annual upgrade turnover.

Experience

Work history, roles, and key accomplishments

Audit and Assurance Senior Consultant

Deloitte

Jun 2025 - Jun 2026 (1 year)

Evaluated compliance with frameworks such as SOX, NIST, ISO 27001, and COBIT. Reviewed user access controls, segregation of duties, and identity management processes, and prepared detailed audit reports.

SOX NIST ISO 27001 COBIT IT Audit Risk Assessment Cybersecurity Firewalls Intrusion Detection Endpoint Protection Audit Reporting Stakeholder Communication

Advisory Consultant

Deloitte

Oct 2022 - Jun 2025 (2 years 8 months)

Conducted risk-based IT audits to evaluate the effectiveness of internal controls, security, and compliance processes. Assessed IT systems, applications, and infrastructure for vulnerabilities and gaps.

IT Audit Risk Assessment Internal Controls Security Compliance Vulnerability Assessment Walkthroughs Control Testing

Information Technology Auditor

State Farm

Apr 2020 - Oct 2022 (2 years 6 months)

Collaborated with a team of security auditors for planning, execution, and delivery of Sarbanes-Oxley 404 testing, including IT General and Security Controls Testing. Participated in risk-based audit assessments and conducted audits on IT and OS platforms.

SOX 404 IT General Controls Security Controls Risk Assessment Internal Controls Change Management Audit Scoping Reporting

IT Auditor

Honda Financial

Nov 2019 - Apr 2020 (5 months)

Assisted with planning and implemented audit process improvement opportunities through use of technology, data analytics, and best practices. Prepared flowcharts, narratives, and reports to document processes and controls.