Mariana Maravilla R

Senior Manager, Technology Risk at EY Mexico (2017-09 – 2025-07)

Led and managed the strategic approach and oversight of IT risk assessment projects for SOX compliance clients, evaluating the design and effectiveness of IT General Controls, IT application controls, and IT Dependent Manual Controls.
Developed and maintained high-level client relationships, providing expert advice and customized solutions for Tech Risk management.
Led the preparation of audit reports and communicated key conclusions and recommendations to senior stakeholders.
Performed SDLC assessments for the implementation of SAP S/4HANA in a SOX-compliant retail company.
Managed IT audit and risk assessment projects for SOX clients, evaluating the integrity of financial relevant systems.
Collaborated with project teams on the identification and documentation of IT General Controls and application controls, ensuring alignment with SOX requirements.
Monitored project progress, managed risks, and provided regular updates to senior stakeholders, ensuring transparency and alignment with expected outcomes.
Identified compliance requirements, risk exposures, and opportunities for cost savings and operational efficiencies, reducing the overall risk profile for clients.
Advised clients in aligning IT strategy with business objectives by assessing governance frameworks and SAP environments, delivering recommendations that optimized processes, reduced risks and complexity, and supported compliance for financial reporting.

IT Internal Auditor at Mexican Football Federation (FEMEXFUT) (2016-04 – 2017-08)

Conducted reviews and evaluations in compliance with International Internal Auditing Standards and the COBIT framework, providing recommendations for improving IT governance.
Performed IT audits defined in the annual internal audit plan, identifying deviations and non-compliance with internal and external regulations.
Maintained relationships with client leadership to manage expectations of service, including high-quality work products within expected timeframes and budget.

IT Auditor Staff at PWC Mexico (2013-11 – 2016-03)

Identified and assessed risks and controls in business and IT processes.
Reviewed and tested key audit controls, including access control, operating system and database logical security, and change management processes.
Gained a comprehensive understanding of IT operations, including applications, operating systems, databases, and the roles and responsibilities within the IT department, as well as business processes related to financial information.
Improved communication and leadership skills through interaction with audit team members and clients
Cultivated solid long-term relationships with clients, maintaining ongoing communication and facilitating solutions to address concerns

Sobre mí