Data Information Technology

KUMOLU TOYE

Phone: +1-862-***-**** Email:*******@*****.***

PROFILE SUMMARY

Information Technology auditor with over 5 years’ experience focused on leading IT audit projects in alignment with business, operational and compliance requirements. Specialized skills in Enterprise security and control implementations, information technology and business process risk assessments, as well as Sarbanes Oxley controls design and effectiveness testing.

SUMMARY OF QUALIFICATION/ SKILLS

Perform IT SOX compliance testing, Business Process Control testing, Cyber security Control Testing, PCI DSS, HIPAA, ITGCs & IT Application Controls testing, ISO 27000, infrastructure audit – Database, Network, Operating Systems, Servers, SOC 1, 2, & 3 Reviews, Third Party Risk Assessment, Policies, Standard and Procedures document reviews

CERTIFICATIONS

CyberArk (May, 2020)

Performing a Technical Security Audit and Assessment (May, 2020)

Comptia Sec+ (In view)

CISA (in view)

EXPERIENCE

North Atlantic Global Services IT Auditor Dec,2016 –July, 2020

West Orange, New Jersey NJ

Pa

Responsibility

Evaluates Information Technology General Controls (ITGCs) and IT Application Controls using COSO and COBIT Frameworks.

Executes technical audits of IT infrastructure controls – Servers, Active Directory, Operating Systems, Data bases.

Participates in the execution of audits at the firm's affiliate locations which included all phases of the audit- planning, Fieldwork, Reporting and follow-up.

Review of attestation engagement SSAE18, SOC 1, II, III review.

Identify and evaluate risks and provided recommendations to the executive management during reviews of the System Development Life Cycle (SDLC).

Executes audit readiness to identify and correct internal control weakness in order to be in compliance with SOX requirements.

Evaluates IT operations, backup, restoration and disaster recovery audits.

Coordinates and perform IT risk-based audits to identify control gaps and areas for improvement

Participates in the review of management's self-identified risks and controls gaps.

participates in the establish of more efficient process for migrating an consolidating data after merger.

Review and ensure appropriate data management policies.

Monitor data compliance to data management policies

Review of approved data management architecture of an organization

Support clients in prioritizing data management initiatives and ensure these are aligned with business priority

Participate in reviewing access control to data

Review how data is been classified, moved and disposed when not in use

Endo grace Ltd Internal Auditor( IT) Feb, 2014 – Mar, 2016

Responsibility

Assessed the design appropriateness and operating effectiveness of Information Technology controls throughout the business cycle.

Performed all aspects of IT audit process from planning, execution, reporting and follow-up

Assisted with audit scope determination, risk and control identification, design of audit program, policies, standards and procedures evaluation, control testing, and evaluation and analysis of results.

Performed Access control, Change Management control, IT Operations Control and IT application controls

Identified deficiencies in the design and operating effectiveness of controls and provide recommendations.

Provided status of the internal control environment within business units and provide recommendation to mitigate the control weaknesses between the current and recommended state.

Assessed the adequacy and effectiveness of the internal controls environment using a risk-based methodology such as COSO, COBIT, ISO and ITIL.

Supported clients with audit readiness initiatives

Infinity Int’l Air and Sea Cargo Ltd Account Official May,2008 –Dec, 2013

Responsibility

Prepared and posted entries to record intercompany transactions between companies within the group, analyzed, and explain material differences.

Performed month-end closing by computing and preparing the journal entries for the accrued expenses, accrued revenue, depreciation, bad debt provision, inventory reserves, bank charges and sales adjustments.

Actively participated in the year-end audit by creating a financial checklist to ensure that all required items are available during the annual audit.

IT AUDIT TOOLS

MS Word, MS Excel, MS PowerPoint, MS Visio, Microsoft SharePoint, Outlook, IDEA/ACL

EDUCATION

M.ED ADMINISTRATION AND PLANNING, 2016

NOUN

HND-ACCOUNTING (Bachelors Degree, US Equivalent, WES Evaluation) 2005OSUN POLY, IREE

OND-ACCOUNTING(Associate Degree, US equivalent, WES Evaluation) 2000

KOS POL TEC, LOKOJA

RELEVANT SKILLS

Strong analytical skills, particularly in regards to assessing the probability and impact of a control weakness.

Effective verbal and written communication skills, with the ability to present sensitive issues to management in a persuasive manner.

Excellent interpersonal and presentation skills

Ability to work well individually and in teams to share information, support colleagues, and encourage participation.

NON - TECHNICAL SKILLS

• Critical analysis and good communication skills

• Highly motivated and proactive professional with strong organizational, interpersonal and time management skills

• Quick adaptability to new environment and curiosity to learn and develop new skills/knowledge

• Strong analytical skills, including the ability to problem solve to make value-added control recommendation

• Demonstrates coaching, leadership and project management skills

PROFESSIONAL AFFLIATION

Information Systems Audit and Control Association (ISACA)

CompTIA

VOLUNTEER WORK/CONSULTING ROLES

Mentoring and Security Awareness

Incident Response Team

Disaster /Business Continuity Recovery Team

IT project Control Advisors

Contact this candidate