Sam Wells, CISSP, CISA | IT Audit Manager
Analytical IT Audit Manager with strong problem solving, technical analysis, and project management abilities. Self-directed and able to excel in any environment. Working knowledge of audit standards, frameworks, and regulations. Experience with programming languages and integrated development environments, penetration testing, vulnerability assessment, data analytics, various operating systems (Windows, Unix/Linux – RedHat, SuSE, AIX, Ubuntu, Debian, Kali, Arch) and virtualization platforms (VMWare, Hyper-V, Virtualbox).
Fluor Corporation, Greenville, SC
- IT Audit Manager | February 2021 to present
- IT Audit Supervisor | February 2020 to February 2021
- Senior IT Auditor | February 2018 to February 2020
- IT Auditor | February 2016 to February 2018
- Staff Auditor | September 2014 to February 2016
Perform IT Audit assurance services and tasks for the corporation following a risk-based audit approach utilizing various audit frameworks and methodologies across varied technology stacks.
- Planned, led, and executed varied and complex IT department audits and SOX 404 compliance testing.
- Supervised performed of work by assigned audit personnel on audits.
- Conducted risk assessment activities in cooperation with auditees.
- Analyzed, documented, and reported deficiencies within IT internal automated and manual controls.
- Prepared audit results and reports in accordance with the International Professional Practice Framework and the Institute of Internal Auditors.
- Point of contact for external auditors (EY) regarding IT Audit projects.
- Created automated tools and scripts to expedite testing efforts and drive efficiency and accuracy.
- Researched data analytics solutions and collaborated with IT stakeholders to identify and remediate security concerns.
- Collaborated with process owners and auditees to efficiently complete audits and mitigation strategies.
- Conducted walkthrough meetings to understand processes and procedures across various technologies and applications.
- Completed integrated financial and IT audits.
Additional work experience unrelated to audit/IT available upon request.
Certifications:
ISACA – Certified Information Systems Auditor (CISA) – May 2018
(ISC)2 – Certified Information Systems Security Professional (CISSP) – August 2022
Offensive Security – Offensive Security Certified Professional (OSCP) – In Progress (2023)
Education:
B.S. Software Engineering, Arizona State University, Tempe, Arizona, United States (Graduated 2019)
A.A.S. Computer Science – Programming, Northeast State Technical Community College, Blountville, Tennessee, United States (Graduated 2014)