Solid understanding of general IT control topics, including logical access, change management, system development, configuration management, data integrity, encryption, retention and disposal, backup and recovery, business continuity and disaster recovery, logging and monitoring, and vulnerability or security management. Performs audit testing across common IT control areas, such as access management, change management, system development, configuration management, data integrity, backup and recovery, business continuity, logging and monitoring, and third-party or cloud-related controls.