Skip to main content
Christina P

Christina P

CISA-certified Technology Risk professional

Talent
DavenportMember since August 21, 2026
IT SOXSOX 404ITGCITACICFRISO 27001ISO 27017ISO 27018Risk AssessmentSAPApplication ControlsSDLCChange ManagementAccess ManagementData IntegrityRoot Cause AnalysisEngagement Economics
·

Hire this person

Send a job offer directly to this candidate

IT SOXSOX 404ITGCITACICFR

About

Isabel is a CISA-certified Technology Risk professional with a unique combination of financial reporting and technology risk expertise developed through progressive experience in accounting, audit, SOX compliance, and IT assurance. Experienced in evaluating ITGCs, application controls, ICFR, and regulatory compliance programs while partnering with business and technology leaders to address risk, strengthen control environments, and support reliable financial reporting. Proven ability to lead global engagements, coach teams, manage stakeholders, and deliver practical, risk-based solutions across technology-driven organizations.

Experience

Technology Risk Senior Consultant - EY US LLP

(2023-03)

  • Led the planning, execution and review of SOX compliance testing for IT General Controls (ITGCs), IT Automated Controls, and key reports across multiple in-scope applications and systems.
  • Performed annual IT SOX risk assessments that identified key control gaps and informed management remediation efforts for high-risk financial reporting processes.
  • Oversaw 60+ walkthroughs annually and design and operating effectiveness testing of IT controls across both internally developed and third-party systems ensuring compliance with SOX 404 and ICFR requirements.
  • Evaluated technology risks across identity and access management, change management, SDLC, data integrity, and cloud environments, providing risk-based recommendations that strengthened control effectiveness and supported SOX compliance objectives.
  • Supported SOC 1, SOC 2/3, ISO 27001, ISO 27017, and ISO 27018 engagements by assessing control design and operating effectiveness against regulatory and industry requirements.
  • Prepared and delivered executive-level status reporting summarizing key risks, control deficiencies, remediation progress, and engagement milestones for management stakeholders.
  • Led the evaluation of control deficiencies, including root cause analysis, compensating control assessments, deficiency aggregation and risk impact determination.
  • Led engagement execution with teams of 2-10 professionals supporting ITGC, ITAC and SOX testing across 20+ applications while reviewing 100+ workpapers annually, oversee deliverable quality, manage timelines, and mentor junior team members including offshore teams and provided guidance on audit methodology, IT controls, regulatory expectations and industry leading practices.
  • Developed resource plans and coordinated staffing across onshore and offshore teams to align skillsets, capacity, and engagement priorities with project requirements.
  • Monitored engagement budgets, balancing resource utilization, timelines, and quality objectives to support overall engagement economics.
  • Provided coaching, mentoring and technical guidance on SOX and SOC requirements, technology risk assessments, audit execution and control evaluation techniques.

Technology Risk Senior Consultant - EY Global Delivery Services (PH)

(2019-09 - 2023-03)

  • Assessed IT General Controls, Application Controls, and key financial reporting controls to support auditor reliance and regulatory compliance requirements.
  • Performed risk-based IT audit testing supporting external, integrated, and SOX audits across major financial reporting systems.
  • Escalated critical control deficiencies and emerging risks to engagement leadership and stakeholders, enabling timely remediation and risk mitigation.
  • Collaborated with onshore teams and client personnel to execute audit procedures, address control gaps, and deliver high-quality engagement outcomes.

Accounting, Audit & Advisory Professional - Frontline Accounting

(2017-12 - 2019-08)

Produced management reports and financial analysis to support management decision-making, prepared financial statements, management accounts, VAT and tax filings, bank reconciliations, statutory reports, bookkeeping, audit support, internal control reviews, and advisory deliverables for clients across accounting, tax, compliance, and financial reporting engagements.

Accounting, Audit & Advisory Professional - Volenday Philippines

(2016-06 - 2017-09)

Produced management reports and financial analysis to support management decision-making, prepared financial statements, management accounts, VAT and tax filings, bank reconciliations, statutory reports, bookkeeping, audit support, internal control reviews, and advisory deliverables for clients across accounting, tax, compliance, and financial reporting engagements.

Accounting, Audit & Advisory Professional - ATD Accounting & Management Services Consulting, Inc.

(2014-11 - 2016-06)

Produced management reports and financial analysis to support management decision-making, prepared financial statements, management accounts, VAT and tax filings, bank reconciliations, statutory reports, bookkeeping, audit support, internal control reviews, and advisory deliverables for clients across accounting, tax, compliance, and financial reporting engagements.

Education

Bachelor of Science - Accountancy - University of Santo Tomas (2013-10)

Skills

CISA-certified Technology Risk professional

Reviews