Sara E.

– Delivered cybersecurity governance advisory and IT control assessments for clients across banking and insurance sectors. – Assessed client security frameworks and produced actionable remediation roadmaps adopted by client teams.

– Delivered cybersecurity governance advisory and IT control assessments for clients across banking, insurance and manufacturing sectors. – Assessed client security frameworks (access management, change management, IT operations) and produced actionable remediation roadmaps adopted by client teams. – Performed compliance gap analyses against ISO 27001, SOC2 and ISAE3402, translating regulatory requirements into prioritized client recommendations. – Identified systemic security risks across enterprise applications through SQL-based data analysis, enabling evidence-based advisory. – Led client-facing engagements across France, UK and Switzerland, coordinating with technical and business stakeholders to align governance practices. – Produced structured audit reports covering risk exposure, control weaknesses and remediation roadmaps for C-level and operational audiences.

As an IT consultant and auditor, I worked on IT audit assignments in various sectors such as: energy production and distribution, banking, insurance, automotive manufacturing, and asset management. My responsibilities and achievements were as follows: With my clients, I was able to: Analyze databases using SQL for data analysis. Identify IT risks related to organization, architecture, and security. Review IT process controls: change management, logical access, operations management. Review IT projects and propose recommendations. Perform ISAE 3402 certifications and PCAOB audits for subsidiaries at client sites (Switzerland, UK, etc.). Perform audits on the quality of data extracted directly from the information system (filter, query, and completeness); Write and formulate IT audit recommendation reports concerning internal IT control. Internally, I focused on improving productivity by: Implementing and presenting Helix General Ledger Analyzer Data Utility 2024. Developing a Python script for client data analysis to optimize audit controls. Achievements: First junior to train the EY audit department team on an internal data analysis tool: Helix General Ledger Analyzer Data Utility 2024. First junior to independently lead 3 statutory audit assignments. First junior to upskill senior auditors from other EY entities on EY France audit methodologies. First junior to develop scripts to optimize audit control tasks.