Sandra is the Controls & SOX COE leader, focused on SOX modernization, outsourcing/cosourcing, and readiness, with a focus on creating enhanced, technology-enabled, agile programs.
Sandra is an Audit & Assurance managing director with over 20 years of experience serving clients in both business and technology risk and internal controls. She is the leader of the Deloitte Controls & SOX Center of Excellence (COE) and a specialist in running, transforming, optimizing, and standing up smart, efficient, and modernized SOX programs. Sandra has extensive experience running global end-to-end SOX programs that are agile, dynamic, and optimized with technology enablement and capabilities built into the SOX life cycle. In addition, Sandra has served as the lead for multiple global, complex, and large-scale transformation projects bringing together and coordinating a broad set of Deloitte capabilities and functions, with a focus on business and enterprise transformation, controls modernization and readiness, implementation projects, and internal audit. She has led internal and external audits for multiple Fortune 500 companies, with a particular focus on both the consumer and technology industries. Sandra has also served high-profile startups where she brings together leading standards to craft a risk and compliance program fit for the company's business purpose. She has extensive experience in IT implementations, strategic IT and business process internal audit reviews, IT risk and governance, operational controls compliance, data governance, and pre- and post-implementation reviews. She has also led multiple external audits as the IT specialist and brings that level of quality and rigor to her clients. Sandra is a Certified Information Systems Auditor.