an IT & Infrastructure Auditor and course instructor with 10+ years helping banks, fintech's, and enterprises strengthen governance, risk, and compliance across cloud and on-premise environments. I specialize in translating complex security and control requirements into clear, testable practices that actually work in production.
As a practitioner-teacher, I cover end-to-end audit and security execution: scoping, ITGC and ICFR/SOX, control design and operating-effectiveness testing, continuous auditing & monitoring, risk assessments, remediation validation, documentation, and executive-ready reporting.