Senior IT Auditor

CYNTHIA OBIUKWU

914-***-**** *********@*****.***

Greenbelt, MD

PROFILE

I am an experienced IT Auditor with over three years of experience in IT

general controls and IT application controls testing with broad experience

in IT infrastructure for both Commercial entities and Federal agencies.

Notwithstanding, I am versed in the assessment of IT systems and security

and data integrity, to identify, manage, and reduce risk; in order to

ensure compliance.

EXPERIENCE

Senior IT Auditor Crest Consulting Group October 2012

- Present

. Perform IT Audit to include Access control, Change management control,

operation control and Application control in accordance with the

established corporate standards for efficiency and accuracy.

. Perform IT Audit on various applications, databases and framework.

. Plan, supervise, assign and evaluate the work of junior IT staff.

. Conduct annual testing of Sarbanes-Oxley (SOX), OMB Circular A-123

Audit and Service Organization Control (SOC) SSAE 16 Review using

COSO, COBIT and FISCAM Frameworks.

. Supervised and managed the IT audit team that performs PCI DSS, HIPAA

testing.

. Assess IT internal controls as part of financial statement audit,

operational controls, compliance controls, Attestation engagement and

Audit readiness.

. Verse knowledge in the use of IT Audit tools (ACL, TEAMMATE, Microsoft

SharePoint, CAAT etc.).

. Maintain a good working relationship with clients to enhance customer

satisfaction and work with client's management and staff at all levels

to communicate audit findings and recommendations.

. Recommend solution to help mitigate IT risks for clients in both

commercial entities and government agencies.

. Actively involved in consolidation of IT audit findings and

presentation of reports with recommended remediation plans during exit

meetings with management.

. Perform IT Audit on Infrastructure and mainframe operating system

technologies including z/OS, RACF and ACF2.

Senior IT Auditor Dataprise Incorporated May 2011-

September 2012

. Performed SOX annual internal control testing using COSO and COBIT

Frameworks.

. Planned, supervised, assigned and evaluated the work of two junior IT

Audit staff.

. Identified and evaluated risks during review and analysis of System

Development Life Cycle (SDLC).

. Developed Audit program, performed walkthroughs, planned and utilized

data analytics as appropriate.

. Performed testing of IT general and application controls, identified

deficiencies in the design and operating effectiveness of controls and

provided recommendations.

. Developed Audit work program and detailed understanding audit

activities, including IT risks and controls, internal control

strengths and weakness.

. Performed IT general controls and application controls review and

monitor segregation of duty and other key management controls.

. Lead and Manage IT team for several IT and integrated audits projects

including Information security and privacy audit, MAINFRAME,

Windows/UNIX servers. Review CAAT (Computer Assisted Audit Testing)

testing analyzes using tools such as ACL on various financial

statement audits.

CERTIFICATION

Certified Information Systems Auditor (CISA) in progress

September 2015

Information Technology Infrastructure Library v3 (ITIL) in progress

June 2015

PROFICIENCY

Microsoft Office (Word, Excel, PowerPoint), Mainframe, Windows 2012,

Microsoft Dynamics, Oracle, Active directory, Firewall, Routers/Switches,

UNIX, ACL, IDEA, Teammate, PeopleSoft, and Microsoft SharePoint.

EDUCATION

BSc - Imo State University Nigeria (2009)

Contact this candidate