Engineer Security

GODFRED RIGHTEOUS KYEI-BAFFOUR

Irving, TX ***** 516-***-**** ********.*******@*****.***

Professional Summary

Senior IT Auditor with 5 years experience in internal Audit, Strong experience in the planning and execution of internal audit procedures. Strong understanding of ITGC and ITAC over IT Operations, Access, Security, Change management and Backup procedures. Knowledge of incident monitoring, response with problem & change management. Skilled in Enterprise Risk Management, Business and Process Audit, and Internal audit. Experienced in policy and procedure reviews, Operational and Compliance audit. Skills

• Risk Assessment • ERP Applications: Oracle Financials, SAP, Peoplesoft

• Operating Systems: Windows, LINUX, UNIX • Tools: MS Office Suite, Visio, Auto Audit, Teammate

• Databases: MYSQL, DB2,Oracle SQL • Regulations: SOX, HIPPA,GAAS

• Network Devices: Firewalls, Routers. Anti-viruses • Framework: COBIT, COSO, NIST, ISO Work History

Senior IT Auditor 09/2017 to Current

Stryker – Mahwah, NJ

• Prepare risk assessments; determine objectives and scope of audits

• Develop audit programs, perform walk through, plan and utilize data analytics as appropriate

• Ensure policies and procedures are implemented and processes are well documented and also performed internal reviews which identified compliance problems that called for formal attention

• Provide day-to-day execution of internal audit engagements and projects such as SOX, compliance audit, and operational audit

• Liaise with external auditors during annual audit and ensured that deficiencies are re-mediated in timely manner before follow up

• Review controls around Administrative, Technical and physical safeguards as related to HIPPA compliance

• Review of IT General Controls (ITGC) and various applications, databases and operating systems

• Extensive knowledge of ERP systems (SAP and PeopleSoft), Microsoft Dynamics, and NetSuite

• Participate in all phases of IT Audit – Planning, Fieldwork and Follow up using applicable framework. COBIT, COSO, NIST and prepare appropriate testing Matrix

• Perform Audit of IT Infrastructure and applicable Database- Operating System, UNIX, Mainframe, SQL, Oracle and DB2 Staff IT Auditor 04/2015 to 08/2017

Stryker – Mahwah, NJ

• Perform assessments, monitor regulations, and work with auditors to ensure policy compliance over legacy and ERP systems such as SAP and Oracle Financials

• Document and test key SOX and IT General Controls leveraging defined process compliance monitoring process

• Coordinate IT related SOX and HIPPA compliance assessment in connection with program development, change management, computer operations, security and configurations as well as vendor service providers

• Assist IT management in identifying gaps between policy and process, developing recommendations to re-mediate control weaknesses and be responsible for developing and maintaining IT control metrics related to compliance activities

• Reviewed controls over information technology in areas like health data security, systems development and implementation, and business system capabilities

• Develop test plans; testing procedures and document test results and exceptions; assess qualities and conditions of controls; report findings and make adequate recommendations to effectiveness of organization's IT internal control system

• Conducts and assists in post audits to determine if corrective action has been taken Systems Engineer 01/2014 to 03/2015

Stryker – Mahwah, NJ

• Participated in all phases of system development life cycle, from requirements analysis through system implementation.

• Monitored and tested application performance to identify potential bottlenecks, develop solutions, and collaborate with developers on solution implementation.

• Installed, configured, tested and maintained operating systems, application software and system management tools.

• Designed systems for Department of Defense for deployment by military in remote locations.

• Worked closely with customers, internal staff and other stakeholders to determine planning, implementation and integration of system oriented projects.

• Resolved issues related to operational components for Local Area Networks, Wide Area Networks and voice systems. Systems Engineer Trainee 07/2012 to 12/2013

Adirondack Health – Saranac Lake, NY

• Completed project documentation, which was created, updated and distributed to all appropriate personnel

• Worked to create safe, low-cost and dependable designs

• Conferred with engineers and designers to investigate and solve failure issues

• Provided documentation on start-up, shut down and first-level troubleshooting of technical processes to support desk staff

• Directed onsite training for business users to maximize productivity

• Established compatibility with third party software products by developing program for modification and integration

• Developed data architecture design to enable analysts to perform targeted customer analysis Education

BSc Business Administration 2012 - University of Ghana, Accra - Ghana Certifications

CISA - In view CRISC - In view

Contact this candidate