Jaspreet Kaur

Technology Audit · Governance Risk And Compliance · 0-1 yrs experience

Open to all options

About

Skills

PythonGoogle Cloud SQLLinuxData VisualizationRisk ManagementInformation TechnologySDLCInformation SecurityAuditingNatural Language Processing (NLP)Business ProcessPowerPointPredictive ModelingImage ProcessingTeam ManagementIT Audit

Experience

Visa

Director Information Technology Audit

Jun 2022 to Present

Senior IT Audit Manager - Technology and Cybersecurity

Nov 2020 to May 2022

Bank of the West

Assistant Vice President - IT, Data and Cybersecurity Audit

Nov 2018 to Nov 2019

Delivering high quality, value added assurance and audit reports for a portfolio of business activities encompassing Banking, Credit and Counterparty and Enterprise Risk Management activities
Managing audit coverage for data governance, cyber security, vendor management and technology operations across all lines of business
Working collaboratively to develop strong client relationships and supporting the delivery of audit plan
Responsible for audit scoping, planning, evaluating, and reporting phases of the audit as well as non-audit activities like continuous monitoring and audit entity level risk assessments
Responsible for providing development and technical support on the key applications for the Inspection Group as well as acting as the primary technology liaison for the Inspection Group with the Bank and BNPP Inspection Generale (IG)

Barclays

Assistant Vice President - IT Audit (Risk, Compliance and Finance Technology)

Oct 2016 to Oct 2018

Technology auditor focused on the risks and controls in the area of Functions (Risk, Finance, Compliance) Technology and CCAR Technology
Responsible for understanding, analyzing, and testing the technology controls including those over data accuracy, completeness and processing, systems development, application security and entitlements, production management and technology governance
Contribute to management of audit coverage for assigned areas of the business, including proposing audits and continuous monitoring work, and contributing to maintaining the Internal Audit opinion of control environment and management control approach
Supervising and mentoring junior staff, and reviewing work papers to ensure they meet internal standards
Assessing potential findings for significance and drafting audit reports including writing clear and concise findings and recommendations

The University of Southern Mississippi

Graduate Assistant

Sep 2015 to Jun 2016

Carrying out short- and long-term projects involving data collection and analysis
Editing articles, reports, policy briefs and business briefs for the department
Maintaining the integrity and quality of the procedures and programs for data collection and preparation
Developing standard operating procedures for various tasks to ensure continuation of projects
Assisting with maintaining the departments social media presence and marketing materials
Providing assistance to department staff for special projects and events

Morgan Stanley

IT Audit Manager - Finance and Compliance Technology

Aug 2014 to Aug 2015

Technology auditor focused on the application and system infrastructure controls that mitigate the risk of business processes in the area of Finance, Compliance, Enterprise Data Systems, and other Corporate Information Systems (supporting HR and Corporate Services)
Responsible for understanding, analyzing, and testing the technology controls including those over data accuracy, completeness and processing, systems development, application security and entitlements, production management and technology governance
Responsible for adopting a holistic approach to evaluation of the control environment and having inter-actions with senior management in the Technology organization
Management and supervision of a portfolio of audits including scheduling and staffing of audit assignments; Supervising and mentoring junior staff, and reviewing work papers to ensure they meet internal standards
Preparing audit planning memorandum including identifying and evaluating key risks, setting audit scope, determining budgets and staff assignments
Performing walkthroughs, assessing the internal control environment and performing controls and substantive testing
Assessing potential findings for significance and drafting audit reports including writing clear and concise findings and recommendations; following up actions quarterly with clients through to completion.

Unknown company

Assisstant Manager - Technology Risk Management

Aug 2012 to Jul 2014

Responsible for carrying out auditing and process improvement engagements and business development activities
Leading the engagements and reviewing the work of the junior team members
In an internal auditors’ capacity, participating in planning, scoping and budgeting for audit programs
Creating/Reviewing policies and procedure documents
Performing IT Governance, General Controls and SOX reviews. Also, assessing IT general controls for End User Computing tools
Conducting segregation of duties analysis and facilitating remediation workshops for educating good practices for access provisioning
Assessing remediation of audit observations raised as part of internal/external audits
Carrying out data-center operations review
Carrying out systems audit across various IT processes
Communicating effectively, both orally and in writing to all levels of management
Expressing a point of view, and advising on risk and control considerations

PwC

Associate - Systems and Process Assurance

Jun 2011 to Aug 2012

Assuming lead role on projects and coaching junior team members
Exhibiting strong and effective inter-personal and communication skills
Auditing the IT general controls around financial reporting based on COSO framework
Performing process understanding of the various business processes in Financial Institutions
Effectively conducting periodic audits of Information Technology and Business areas as per audit plans
Performing process walkthroughs and testing internal controls for design and operation effectiveness
Evaluating the adequacy of the clients’ system (automated) controls
Conducting interviews, documenting client responses, reviewing documents, and preparing detailed work papers (as per re-performance standard) clearly documenting the audit procedures performed and the audit results obtained
Identifying and validating key ITGC Controls for Change Management, Physical and logical security, Computer Operations, Governance (Entity level Controls) and Software Development Life-cycle domains
Creating flowcharts, process narratives for various IT and Business processes

Infosys

Security Analyst

Sep 2007 to May 2011

Was engaged in software development and internal audits
Internal Audit:
Responsible for assuring compliance against client requirements (as agreed upon for Offshore Delivery Centers), baselines and standards (ISO 27001)
Carrying out periodic audits and documenting the audit reports and highlighting the perceived risk to the relevant stakeholders. Also, following up on remediation of previous audit observations
Checking for BCP/DR compliance and Network, Physical, Application, Operating System and Database security compliance
Automating ‘Audit Feedback’ process for the unit using MS-Access and MS-InfoPath
Software Development:
Analyzing business specifications and translating them to system requirements and task specifications for junior programmers
Developing new modules, carrying out analysis of existing programs and processes for making recommendations which would yield a more cost effective product
Participating in all stages of validation activities (unit testing, module testing, integrated testing, system testing, etc.)
Being instrumental in reviewing artifacts (Test Scripts, documentation related to Bug-fix, automated testing procedures) and facilitating their execution in order to ensure a quality deliverable
Carrying out the understanding of the issues that rose at customer level as well as through internal testing and providing a business solution to address the same
Presenting Root Cause Analysis for major issues and providing feasible solutions for them

Education

Fullstack Academy

Primary

1691081202104x548259572917207000

Jul 2025

Southern Miss College of Business and Economic Development

Master of Business Administration (M.B.A.), Business Administration and Management, General

Jan 2016

K. J. Somaiya Institute of Technology

Bachelor of Engineering (B.E.), Electrical, Electronics and Communications Engineering

Sri Guru Nanak Dev Khalsa College (SGNDKC), Delhi

Higher Secondary School Certificate, Science

Preferences

Target roles

Technology Audit, Governance Risk And Compliance

Work style

Open to all options

Job types

Not set

Salary target

Not set

Locations

Not set

Industries

Not set