Tracy Cheng

- Bootstrapped, launched, and scaled an international e-commerce brand to seven-figure annual revenue. - Developed and executed full-funnel digital marketing strategies (social, paid media, CRM/email, search), driving profitable customer acquisition at scale with a minimal team. - Built advanced direct-to-consumer systems for sourcing, fulfillment, and customer support, ensuring premium service and rapid global shipping. - Oversaw all aspects of business operations: supply chain management, financial planning, contractor recruitment, CX, and compliance in both US and Korean markets. - Fostered lasting customer loyalty and brand advocacy through authenticity, reliability, and a data-driven approach to product and market selection. - Recognized for thriving in highly saturated and competitive sectors, outperforming larger teams by prioritizing automation, operational rigor, and continuous learning.

- Lead, direct, and perform comprehensive information technology audit activities. Ensure that key IT-related risks are identified and evaluated by performing risk assessments. - Provide guidance and make recommendations to mitigate risks related to enterprise technology and security. Identify new risks and introduce internal controls to address emerging risks in the technological environment. - Provide technological guidance and support to the Internal Audit Department. Implement generally accepted standards for IT control and security practices such as COBIT (Control Objectives for Information and Related Technology) and SANS (System Administration, Networking, and Security) Institute within the IT audit work. - Perform lead duties including review of work papers, IT audit reports, and work performed by other auditors. - Provide advisory assistance for technology development initiative, such as new system development and IT Disaster Recovery and Business Continuity Plans (BCP) testing. Consult with management to assist in the development of policies, procedures, and internal controls.

- Acting Manager/Lead Senior responsible for leading SOX 404 audits of business processes, internal controls, automated and IT General Controls for Fortune 500 companies in the Entertainment, Technology, Media and Communications industries; - Lead and execute internal audits and provide outsourcing services for Internal Audit Departments; - Assist in the training and providing coaching to other staff, report to and handle firm management’s expectations, build and maintain good working relationships with clients; and - Manage projects (e.g. resource requirements and project workflow) to meet engagement objectives and budget.

- Manage the Bank’s financial IT controls documentation and attestation process to support the Bank’s SOX 404 CEO and CFO certification; - Interact extensively and lead discussions with major stakeholders of the Bank, including Business Units (process and control owners), Internal Audit, Central Financial Controls Office, and External Auditors; - Act as subject matter expert for SOX methodology and standards, and provide consultation to IT applications/process owners to ensure proper alignment between relative risks and key control environment; - Perform scoping of SOX-relevant controls for internal and external auditors to perform relevant walkthrough and testing; - Proactively identify potential opportunities for process change within IT processes; - Assess and analyze SOX significance for new IT applications; - Team winner of annual TD “Crack the Case” Finance Competition (Oct 2012); • Recipient of TD "Act for Impact" award for demonstrating TD's core values "Operating with Excellence" (March 2013);

- Designed, executed and lead Information Technology General Control (ITGC) reviews across different industries, including clients in financial, pharmaceuticals, aviation, retail, and insurance industries. These included areas of information strategy and planning, operations, logical security, physical security, systems development and maintenance, database implementation and support, network support, systems software, business continuity planning, disaster recovery and hardware maintenance. • Led system and process reviews of various clients across different industries, including financial services; responsible for identifying issues and determining financial impact and mitigating controls, reporting and recommendation to senior management on system and process issues identified. • Performed various assessments and benchmarking of IT operations (including IT helpdesks and security support functions) against companies strategy and industrial benchmarks • Performed SAS 70/ISAE 3402 assessments of IT operations and security controls for a large financial services client and an e-invoicing client. • Performed SOX Advisory services for clients in various industries including financial services, telecommunications, logistics, and education sector. • Assisted in the training and providing coaching to other staff, report to and handle firm management’s expectations, build and maintain good working relationships with clients; and • Managed projects (e.g. resource requirements and project workflow) to meet engagement objectives and budget.