Aras Akan

Experience

• 

  Aras Holding

  Jan 2011 - Jul 2012

  Assistant Auiditor

  Conducting compliance audit to subsidiaries about financial and operational processes.Evaluating current and proposed system, processes, policies and procedures. Preparing reports which would be presented to board of directors.

• 

  Finansbank

  Jul 2012 - Aug 2018

  Conducting compliance studies of SOX and Management Statement of IT processes regarding to COBIT framework. Within COBIT framework, realizing necessary control walkthroughs and tests related to DS5, PO9, DS12, DS13 and DS3 domains. Providing coordination between external auditors with businnes units for SOX and Management Statement controls. Interviewing with relevant businnes units about identifying and developing action plans of issues and following up these issues and reporting their status. IT and SOX Controls

  • Senior IT Auditor

    Feb 2015 - Aug 2018

  • IT Auditor

    Jul 2012 - Jan 2015
• 

  ICBC Turkey

  Sept 2018 - Jul 2019

  Assistant Manager

  Performing periodic IT control activities. Reviewing IT control activities in regards of BRSA (Banking Refulation and Supervision Agency) regulations that are in line with COBIT standards.

• 

  Maya Tech Ltd.

  Aug 2019 - now

  Founder

  My main services are categorized under 2 main components; IT audit and IT audit consulting services. It audit will mainly cover end to end assessment of IT processes and identification of risk points whereas IT consulting will include definition of control points to mitigate the risks identified as part of the assessment phase as well as monitoring the effectiveness of control points. I used worked for QNB Finansbank and ICBC Turkey. My main responsibilities were conducting compliance studies over IT processes for SOX and BRSA (Banking Regulation and Supervision Agency) regulations which are in scope of COBIT framework. Within COBIT, I was specialized in auditing over “DS5 - Ensure Systems Security” , “PO9 - Assess and Manage IT Risks”, “DS12 - Manage the Physical Environment”, “DS13 - Manage Operations”, “AI6 - Manage Changes” and “AI7 - Install and Accredit Solutions and Changes” control domains. Show less