Management Security
Resume:
Emeka N. Agwu
**********@*****.***
SUMMARY
More than seven years hands on experience in ITGC controls & testing, Risk compliance, Cybersecurity, incident management, crisis management, vulnerability management, Third party vendor assessment and remediation planning. I have in depth knowledge of OMB Circular A-123, Sarbanes-Oxley Act SOX, IT General Controls (ITGC), SAP, HIPPA, SOC 1,2, & 3, PCIDSS, SDLC,SSAE 18, and ERP, security +, using COBIT, and NIST frameworks to determine if the controls are appropriately designed and effective, to achieve clients' general objectives. Adept skills on client relationship with strong analytical, logic, problem solving and management skills, self-motivated with excellent interpersonal, ability to meet tight deadlines with conflicting priorities and project management skills. More so, audit planning, fieldwork mapping, reporting, follow-up, execution, process integration, operational functions, risk compliance, strategy design, data configuration, Vulnerability management, Audit review, drafting process, process flow design, client relationship, system improvement, business collaboration, Leadership Development, Communication, IT governance, Political, Project Management, Cultural awareness Quality Assurance Scope Management, Team Management, Agile, Best Practices. Negotiations, people management, Conflict Resolution, Change Management
& Process Improvement.
ACHIEVEMENTS SUMMARY:
• Invested 100% communication and transparency to enhance effectiveness in business processes.
• Detailed on IT general/application controls and other types of IT audit functions such as Cybersecurity reporting, financial statement support, risk assessment, compliance, SOX, SOC, SAP and SDLC to reduce the amount of substantial vouching, saving cost, time, budget and ascertained up to 95-100% effectiveness and accuracy on all projects.
• Contributed over 100% production on business resilience cost efficiency, technology improvement and service quality on all technology projects. SENIOR IT AUDITOR BMX Financial Services March 2018- present
• Performed IT General and Application controls testing and walkthroughs as well as functional Segregation of Duties Review for applications supporting business processes and systems to ensure security risks are appropriately addressed by implemented controls
• Undertook comprehensive risk assessment and engagement planning by obtaining in-depth understanding of business functions and applications being audited, identifying and assessing risks, document preparation, and reporting with the aid of tools like Archer.
• Led IT Implementation and testing of internal controls over financial reporting: Sarbanes Oxley Act (SOX), performs Walkthroughs of controls and evaluates operating effectiveness of controls.
• Served federal and non-profit clients by offering consultation, facilitation and strategy services to help them communicate in a digital world.
• Designed and performed audit tests related to documented internal controls, evaluated controls gaps and mitigated controls per COSO, COBIT, PCI DSS and SOX internal frameworks.
• Served as a Liaison between in-house team, client, internal audit, and financial statement audit team. Also included overseeing and leveraging the work of internal audit.
• Validated audit findings with senior management and prepared audit reports with reasonable and appropriate recommendations to be distributed to all applicable stakeholders
• Conducted testing of Sarbanes-Oxley (SOX) and Service Organization Control
(SOC) SSAE 18 Review, using COSO and COBIT frameworks
• Communicated audit results to management through verbal discussions and written audit reports and work closely with management to develop agreed upon actions to remediate risks identified.
IT AUDITOR Catalyst 3D Consultant May 2016- Feb 2018
• Communicated audit results to management through verbal discussions and written audit reports and work closely with management to develop agreed upon actions to remediate risks identified.
• Conducted testing of Sarbanes-Oxley (SOX) and Service Organization Control
(SOC) SSAE 18 Review, using COSO and COBIT frameworks
• Evaluated the design and effectiveness of technology controls throughout the business cycle.
• Performed fieldwork in accordance with the approved IT audit program. This will generally include documentation of the system, identification and testing of internal controls (general computer controls, application controls, user access, etc.), analytical review, and substantive testing.
• Assisted in preparing audit planning memorandum and tailored audit programs. The audit program will include the assessment of internal control design, operating effectiveness and overall control environment effectiveness.
• Prepared audit scopes reported findings and presented recommendations for improving data integrity and operations.
• Performed assessment of IT internal controls as part of a financial statement audit, Internal and operational audits, Attestation engagement, and Audit readiness.
• Demonstrated awareness of the Standards for the Professional Practice of Internal Auditing as promulgated by the Institute of Internal Auditors
• Effectively communicated with senior associate and / or management. IT AUDITOR St Helen Healthcare June 2012-April 2016
• Developing and maintaining a HIPAA-compliant privacy program
• Clearly and accurately documented the execution of specific audit procedures as defined by the audit engagement objectives, audit client's engagement history, and planned audit approach.
• Conduct integrated and IT audits, including pre/post- implementation, privacy, data governance, and cybersecurity reviews based upon a comprehensive understanding of risks.
• Testing HIPAA privacy rules on how client/covered entities handle disclosure of PHI such as social Security number, contact information, and medical records of customers
• Demonstrated the ability to research issues, trends, etc. via external sources
• Audited HIPAA privacy rules and tested the security rules which regulates EPHI and lay out types of security safeguards required for compliance.
• Audited new and existing information systems applications and infrastructure to ensure appropriate controls exist, processing is efficient and accurate and information system procedures are following corporate standards and federal regulations.
• Assist in the development of formal written reports to communicate audit results to management and makes recommendations as appropriate.
• Conducting a risk analysis and creating HIPAA compliant procedures where needed.
• Prepared audit scopes reported findings and presented recommendations for improving data integrity and operations.
EDUCATION
Bachelor of Science in Business Management
University of Phoenix, Houston TX
CERTIFICATION:
CRISC in progress
CISA in progress
CISSP in progress
SKILLS
AUDITING MANAGEMENT, SHAREPOINT BASED SYSTEM, ORACLE AND THE USE OF AUTOMATED SCRIPTS, SAP, TEAMMATE, AUDIT COMMAND LANGUAGE (ACL), ADVANCED MS OFFICE SUITE, POWER POINT, EXCEL SPREADSHEETS, TIME MANAGEMENT, PROFESSIONAL AND MATURE. STRONG ORGANIZATIONAL AND PROJECT MANAGEMENT, EXCELLENT CRITICAL THINKING AND PROBLEM- SOLVING, NETWORKING SYSTEMS, OPERATING SYSTEM, SQL DATABASE, INFRASTRUCTURE, PRIME, CRM, SALESFORCE, BUSINESS INTELLIGENCE, SCRUM MASTER AND OSS, MICROSOFT DYNAMICS, PROGRAMMING, JAVA SCRIPT, UNIX, AGILE METHOLOGY, NETSUITE, WINDOW SERVER, IDEA, SOX, ORACLE DATABASE, PEOPLESOFT, ACL, ARCHER AND AURORA, CARS AND ATS.
Contact this candidate