Senior Manager Internal Auditor
Resume:
Amy Tang (CIA, CISA)
Email:********@*******.***;************@*****.***
Cell: 408-***-****
QUALIFICATION HIGHLIGHTS:
Results-oriented professional with twelve years of diverse experience, including five years in business/Financial Statement audit and seven years in IT auditing. Demonstrated expertise in accounting, finance, business operations, ERP systems, and SaaS applications. Proven ability to develop and implement auditing programs based on PCI-DSS, ISO 27001, SOC1, SOC2, NIST 800, and other frameworks. Adept at designing and implementing controls from scratch, drafting/testing procedures for business and IT controls, and ensuring compliance with industry standards.
PROFESSIONAL EXPERIENCE:
Senior Manager, ITGC - Natera Inc. (Jul 2023 - Feb 2024)
•Applied hands-on experience in application controls.
•Prepared quarterly UAR working papers for access control testing.
•Drafted SOC I type II review working papers.
•Executed remediation actions for failed interim controls.
Manager, SOX and Internal Controls - Hashicorp Inc. (Sep 2021 - Apr 2023)
•Implemented SOX ITGC program for a newly IPOed company.
•Aligned day-to-day tasks with company roadmaps to support vision and strategy.
•Worked on SOX ITGC scoping to remediate defined risks.
•Contributed to achieving first-year SOX compliance.
Program Manager, IT Compliance - Synaptics Inc. (Oct 2020 - Jun 2021)
•Supported ITGC and SOC programs.
Independent ITGC/Audit/Security Compliance Consultant (Jun 2018 – Sep 2020)
•Assisted clients in achieving CLEAN SOX/SOC1/SOC2 auditing reports.
•Conducted due diligence checks through SDLC processes for critical auditing projects.
•Addressed SOD risks and collaborated on security exception request reviews.
•Reviewed system policy enforcement and certified/sign off for auditing purposes.
•Provided oversight for application controls and accounting module customization.
Senior Internal Auditor - Stanford University (Jul 2017 - May 2018)
•Conducted IT operational audits and participated in ERM projects.
•Led operational projects, using risk assessment heat maps to guide auditing programs.
Senior Internal Auditor - KLA-Tencor (Dec 2015 – Apr 2017)
•Managed end-to-end operational, compliance, finance, FCPA, and IT auditing projects.
•Reviewed and rationalized controls, ensuring efficient execution.
•Conducted operational audits on manufacturing, including BOM and inventory.
•Prepared process narratives, mappings, and flow charts for international sites.
Senior Internal Auditor - SunEdison Inc. (Aug 2014 – Dec 2015)
•Conducted SOX 404 audits, addressing potential risks.
•Led audits covering 75% of the company's revenue across multiple regions.
•Evaluated existing controls over accounting activities, including inventory and fixed assets.
•Conducted compliance/FCPA audits to address potential fraud risks.
EDUCATION:
•Bachelor of Management, Accounting and Finance, The University of Lethbridge (2006-2010).
•Certified Internal Auditor.
Contact this candidate