Amy Tang

I am an auditor responsible for auditing projects which include manual controls designed and implemented for financial statements as well IT general controls.

In recent years, I am focusing more on ITGC controls which include ITACs and key reports.

Certified Internal Auditor (CIA) and Certified Information Systems Auditor (CISA) with over 12 years of progressive experience in IT General Controls (ITGC), SOX/ICFR compliance, SOC 1 & SOC 2 reporting, ISO 27001, and enterprise risk management. Extensive expertise in evaluating the design and operating effectiveness of internal controls across complex technology environments, including cloud platforms (AWS, Azure), ERP systems (NetSuite), CRM systems (Salesforce), and large-scale system implementations.

Proven experience leading and managing IT audit and compliance programs within both public and private organizations, including high-growth technology companies. Strong background in control framework alignment and maturity assessment under COBIT 2019, NIST SP 800-53/171, ISO 27001 Annex A, and SOC standards. Demonstrated ability to build risk-control matrices (RCMs), perform data-driven control testing, assess key reports (IPE validation), and evaluate SDLC governance, change management, access management, and computer operations controls.

Bachelor degree, accounting and finance major