Sung Joon Kim

I am an IT audit and cybersecurity consultant with hands-on experience conducting FFIEC, SOX 404, and FDICIA audits, performing ITGC and application control testing, and delivering actionable remediation recommendations that strengthen controls and regulatory compliance. I combine technical assessment skills—vulnerability scanning, social engineering testing, and CIS Controls alignment—with practical audit execution to produce clear, client-ready reports and train engagement teams.

Previously, I managed multi-location retail operations, driving $3M+ in annual sales while implementing inventory controls, deploying IT solutions, and leading teams, which gives me a strong operational perspective when assessing business and technology risk. I am committed to helping organizations reduce risk, improve control maturity, and meet regulatory expectations through pragmatic, prioritized remediation and effective stakeholder collaboration.