KIMBERLY ANDERSON
Managing Director, UHY Inc.
St. Louis, Missouri
Phone : 314-615-1275
Email Address : kanderson@uhy-us.com
Background
Kimberly Anderson serves as a Managing Director in UHY’s Technology, Risk, and Compliance practice, bringing over 25 years of experience in risk management, compliance, Big Four internal auditing, and global IT consulting.
She possesses extensive knowledge of internal controls, operating policies, and procedures related to business processes and information systems, having delivered internal audit and control services to both privately and publicly held organizations. Her work has focused on identifying and assessing internal controls while consulting with management on developing business and systems controls, policies, and procedures that align with industry-leading practices, contractual obligations, and regulatory requirements.
Kimberly's specialty areas include operational controls, IT general controls, governance, risk and compliance, information security, and cyber risk management. She leads internal control attestations (SOC 1®, SOC 2®, and SOC 3®) for business processes and systems, which involves developing and executing audit plans, pinpointing control deficiencies, and recommending remedial actions and improvements. Additionally, she handles engagement and departmental quality assurance to ensure client, project, and regulatory needs are met. Her project management expertise encompasses creating program protocols and methodologies, gathering and analyzing data, assessing risks, tracking progress, and driving decision-making, while identifying process improvements to boost efficiency and profitability.
Kimberly's IT controls and operational compliance proficiency covers System and Organization Controls (SOC) attestations, NIST 800-171 and CSF compliance, ISO 27001, and PCI compliance.
Certifications & Education
- Bachelor of Science in Chemistry with a minor in Business Administration, Southern Illinois University
Contact Kimm
By submitting this form, you agree to be contacted by UHY.
Related Insights
07/14/26
Effective July 13, 2026, the Department of War (DOW) suspended the Phase II requirements of the Cybersecurity Maturity Model Certification (CMMC), which was…
07/01/26
Instructure, the company behind the Canvas learning management system, recently disclosed a cybersecurity incident involving unauthorized access to certain user data.
07/01/26
A SOC 1® report can be a valuable tool when a service organization initiates, processes, or records transactions that impact your company’s financial…
05/29/26
Mergers and Acquisitions (M&A) were labeled as a primary strategic priority for the middle market in 2026, with 54% of companies actively considering…
05/01/26
As we kick off Internal Audit Awareness Month this May, the 2024 release of the Global Internal Audit Standards represents one of the…
02/02/26
To understand the value of a high-quality penetration test, you must first understand the penetration testing industry itself.
09/08/25
As cyber threats become more sophisticated and pervasive, organizations must demonstrate robust cybersecurity practices to protect sensitive data and maintain stakeholder trust.
01/22/24
It’s important for your clients and internal stakeholders to know how your business handles sensitive data.
01/17/23
UHY Advisors, Inc.