It audit/ IT Compliance
Resume:
Kathryn Simpson
IT Auditor Denver, CO ***** 904-***-**** *****************@*****.***
Summary
IT audit and compliance professional with 5+ years of experience in internal controls testing, ITGC assessments, and risk analysis across federal and private-sector environments. Skilled in evaluating access controls, change management, and segregation of duties under GAGAS (Yellow Book), SOX, and NIST-aligned frameworks, with SQL- driven data analytics and a growing security-operations skill set (SIEM, Nmap). CISA candidate and M.S. Cybersecurity Management and Policy student. Seeking remote, part- time or evening IT audit and GRC work.
Highlights
Strong cross-functional communication and stakeholder collaboration across IT, Finance, Legal, and Security teams.
Experienced in internal controls testing, ITGC assessments, and risk analysis within federal and private-sector environments.
Knowledge of GAGAS (Yellow Book), SOX, and NIST-aligned control environments, including evaluation of access controls, change management, and segregation of duties.
Work Experience
Compliance Auditor Cotiviti Remote May 2025 – Jun 2026 Performed IT and operational control testing aligned with GAGAS (Yellow Book), SOX, and internal control frameworks to assess design and operating effectiveness. Evaluated ITGC areas including access controls, user provisioning, change management processes, and segregation of duties within enterprise systems. Analyzed large datasets using SQL, Excel, and Power Query to identify anomalies, control deficiencies, and compliance gaps.
Prepared audit workpapers, system walkthroughs, and evidence packages supporting internal and external audit requirements.
Kathryn Simpson – IT Auditor Resume
Page 1 of 3
Collaborated with IT, Legal, Security, and Finance teams to remediate control deficiencies and strengthen governance processes.
Financial Reporting Analyst Redwire Jacksonville, FL Jun 2023 – Jan 2024 Performed Internal Control over Financial Reporting (ICFR) and IT-dependent control testing supporting SOX compliance.
Evaluated system-generated evidence and financial reports used in SEC reporting to confirm data integrity and reliability.
Coordinated with internal and external auditors to provide walkthroughs, documentation, and control testing evidence.
Maintained audit-ready documentation including control narratives, testing summaries, and remediation tracking.
Auditor Defense Contract Audit Agency (DCAA) Frederick, MD May 2018 – May 2022 Conducted federal compliance and internal control audits under GAGAS (Yellow Book) standards.
Evaluated contractor financial systems, accounting processes, and internal controls for compliance with FAR/DFARS requirements.
Performed analytical procedures using Excel and Power BI to identify financial risk indicators and control deficiencies.
Prepared detailed audit reports and working papers with actionable recommendations for federal stakeholders.
Technical Skills
Audit and compliance: ITGC testing, SOX/ICFR, GAGAS (Yellow Book), FAR/DFARS, NIST-aligned controls, audit sampling, workpaper documentation Data and analytics: SQL, Power Query, Power BI, IDEA, Advanced Excel (data analysis, controls testing, audit support)
Security (graduate coursework): SIEM log monitoring and analysis, Nmap network scanning
Systems and tools: CaseWare, Workiva, Oracle, NetSuite, Costpoint Certifications
Certified Information Systems Auditor (CISA) – In Progress Kathryn Simpson – IT Auditor Resume
Page 2 of 3
Google Data Analytics Professional Certificate – 2025 Education
M.S., Cybersecurity Management and Policy University of Maryland Global Campus In Progress
Bachelor of Business Administration Florida State College at Jacksonville Kathryn Simpson – IT Auditor Resume
Page 3 of 3
Contact this candidate