Tajammal Riffat

***The postings on this site are my own and don't necessarily represent my employer's positions, strategies or opinions.*** __________________________________________________________________________________ I currently work for Microsoft as a Senior Manager, IT Audit, Compliance and Privacy. I have strong knowledge in performing variety of process, business, and Information Technology control reviews that relate to different regulations and industry certifications and compliance frameworks. In addition to the background in business and IT operations, I have gained significant experience in performing internal controls assessments, external IT audit support, preparing service audit reports, and designing business process improvements. I have worked with “Big 4” companies in a consulting/advisory role where I performed assessments of Internal Controls Over Financial Reporting (ICOFR) for various SOX, CSOX and non-SOX clients. Industry Specialties: Oil and gas, natural resources, utilities, transportation, trust companies, forest, telecommunication, Insurance, technology, computer software and medical associations. Functional Specialties: • IT Audit • Service Auditor Reports (SSAE 16, SAS70) • Business Continuity Management • IT Assurance • IT Control Design and Evaluation • IT Service Management and IT Governance Education: • Bachelors of Commerce- Accounting University of Toronto • Certified Information Systems Auditor (CISA)- ISACA • Certified Data Privacy Solutions Engineer (CDPSE)-ISACA • Certified Fraud Examiner (CFE)-ACFE • Certificate in International Financial Reporting (Cert IFR)-ACCA • Certificate in International Auditing (Cert IA)-ACCA • Working towards obtaining Certified Internal Auditor (CIA)-IIA