Antony Joy

• Lead and deliver end-to-end IT audits, including planning, scoping, testing and reporting in line with risk-based audit plans for clients across manufacturing, retail, technology, and financial services. • Evaluate design and operating effectiveness of ITGCs including, User Access Management, Change Management, Incident Management, Batch Management, ITACs and ISAE 3402 (SOC II) Reports review. • Partner with Technology and Information Security teams to understand control environments and provide pragmatic, value-adding recommendations. • Deliver assurance over digital transformation programs and major system implementations. • Deliver assurance reviews over cloud platforms including AWS and Azure environments, identifying control gaps and recommending pragmatic remediation actions. • Responsible conducting Cyber Security Audits covering Security Framework, Backup and Recovery, IT Security (Baseline), Network and Firewall Security Management, IT / Mobile Device Management, Vulnerability Management, and IT Security Training. • Evaluate technology and cybersecurity risks against regulatory and industry frameworks including FCA/PRA expectations, DORA, ISO 27001, COBIT, NIST CSF, GDPR, and Cyber Essentials. • Produce high-quality audit workpapers, audit findings, and present audit findings and control improvements recommendations to senior stakeholders, including Directors and Audit Committees, and follow up on corrective actions. • Support continuous improvement initiatives within Internal Audit through collaboration, risk assessment activities, and adoption of audit analytics and emerging technologies including AI-enabled audit approaches. • Supervise and mentor IT audit teams, managing workloads across multiple concurrent engagements.