At Accenture, I own audit-readiness execution across regulatory and technology-risk workstreams, coordinating walkthroughs, evidence requests, testing support, and remediation follow-through. I also perform enterprise and IT risk assessments and SOX and IT control testing.
At McKinsey & Company, I conducted IT, operational, and third-party risk assessments and supported SOC 1/SOC 2 and SOX audit readiness. I tested controls across access, change management, endpoint security, and data handling, and partnered with control owners on remediation.
Across these roles, I’ve translated NIST CSF, ISO/IEC 27001, SOC, SOX, and other compliance requirements into practical control and evidence expectations. I use GRC platforms and audit tools to track findings, maintain audit-ready documentation, and prepare executive risk summaries.
