Clarissa Lucas, CIA, CISA, CIDA

Independently led audit engagements relating primarily to Compliance and Risk Management functions. Specific responsibilities included: • Researching applicable laws and regulations to determine the impact to the audit scope and objectives • Determining inherent risks, controls, and resulting residual risks to the auditable entity • Serving as the primary audit liaison with engagement clients • Escalating issues and untimely client responses to appropriate member(s) of management • Supervising audit staff and monitoring completion of audit fieldwork • Reviewing audit work papers for accuracy and compliance with Internal Audit policies • Discussing audit findings and recommendations with engagement clients and management • Preparing and issuing audit reports to engagement clients Developed and trained audit staff on how to effectively write work papers and audit recommendations Responsibilities also included all tasks required of a Senior Auditor

• Planned, organized, and led audit engagements that assess controls and management of risk, specifically surrounding bank compliance with Federal laws and regulations, including privacy laws and CRA/HMDA • Conducted interviews and meetings with engagement clients • Consolidated and analyzed supporting information to support audit conclusions • Prepared work papers in accordance with Internal Audit policies • Conducted follow-up validation testing of management action plans for corrective action and communicated results to audit client

• Investigated and analyzed client transactions and identified unusual, suspicious, or fraudulent activity in accordance with regulations, such as the Bank Secrecy Act (BSA) • Gathered documentation to support conclusions reached in investigations • Demonstrated consistent decision-making and judgment for alert recommendations

• Reviewed and analyzed Know Your Customer (KYC) data for completeness, quality, and compliance with internal policies as well as regulatory requirements • Analyzed KYC information for clients in order to determine and assign appropriate AML Risk Ratings