It Auditor Security Manager

Ofurie Patrick CISA, CISM

***.********@***.***

Phone: 978-***-****

SUMMARY

Skilled in developing strategies and new processes to enhance profitability and efficiency. Also experienced in performing various information Technology (IT) audits, including information technology general controls (ITGC) and application controls (ERP System. SAP, Mainframe, SDLC etc.). Proving success in solving complex, technical problems by leveraging extensive knowledge of audit procedures, techniques, internal control concepts, and risk-based audit testing.

Ready to bring my skills and expertise to any team with a proven record of transforming teams, performing financial analysis, and providing findings and recommendations to management. Built strong working relationships with clients as evidenced through positive feedback communicated to Audit Team Management. Ability to work under pressure and with minimal supervision and budget time efficiency. High energy, dynamic personality and strong work ethic. Good oral and written communication skills and strong client service orientation.

WORK EXPERIENCE

Oracle Cerner - Arlington, VA Dec 2018 - Present

IT Auditor

Analyzing and documenting all information systems and related controls and developing appropriate audit program to test the controls identified and evaluate operational compliance.

Participating in information technology risk assessments, IT audits, Sarbanes-Oxley (SOX 404) compliance assessments, and IT consulting engagements.

Perform risk assessment, document related risks and key controls; Document tests performed and results to ensure work papers support noted observations, conclusions, and recommendations, reducing disagreements, with clients by more than 80% planned supervised, coordinated, assigned, and evaluated the work of 7 subordinated internal auditors.

Conducts walkthrough, formulated test plans, documented gaps, tested results, and exceptions.

Review work papers and prepare written summaries of findings and recommendations.

Prepare all necessary financial statements and related disclosures and reportable letters with an eye on quality, thoroughness, accuracy, and timeliness; coordinated audit activities with management prior to and during the audit; developed audit workpapers to document findings, reviewed and tested control environment and make recommendations to management.

Job duties include QuickBooks Clean-up work for all entities (Oracle Cerner. Partnership) accounting related matters, including cash and other accounts (AP & AR, inventory, interest allocations), booking journal entries as required and ensure that transactions are recorded accurately and in compliance with applicable standards.

Preparation of consolidation and elimination entries, conversion of cash to accrual basis, prepare corporate tax returns and tax planning.

Participates in IT general controls testing for Sarbanes-Oxley 404 (SOX) compliance in public and private companies.

Implements process improvements to SOX testing, resulting in efficiency in review time and desirable financial reporting.

Works collaboratively with internal and external auditors, business process owners and management.

Experts in routine auditing work which involves meticulous attention to details in examining, investigating, and reviewing records, reports, and management practices to ensure compliance with statutes and internal regulations, and conducting audits for efficiency, and effectiveness.

Wells Fargo Bank - Washington DC Oct 2015 – Nov 2018

IT Auditor II (Contract)

Participated in audit planning and risk assessment to understand client’s business processes and IT environment necessary to develop an effective audit program.

Worked with other team members to create audit conducting independent and re-performance testing of SOX compliant controls that supported the confidentiality, integrity, and availability of sensitive and confidential information systems by ensuring that all the controls are properly designed and working effectively.

Reviewed all artifacts submitted by auditees to ensure the completeness and accuracy of all audit artifacts.

Performed Information Technology General Control testing on the organization’s network and all the customer facing applications and Infrastructures.

Performed quarterly review on all the key controls in the organization by conducting IT auditing on general computer controls on all application and infrastructures.

Reviewed all vulnerabilities analysis reports to determine inherent risk to information assets.

Reviewed all artifacts submitted by auditees to ensure the completeness and accuracy of all audit artifacts.

Reviewed all access control to ensure elimination of toxic combination of roles and to ensure segregation of duty is clearly defined.

Performed sampling methodology to validating population analysis

Provided recommendation and remediation on identified weak internal controls for application and business owner.

Ettain Group – Charlotte, NC Sep 2012 – Oct 2015

Activation Analyst (Consultant)

Interacted with internal departments to understand EHR business requirements. Analyzes operational workflow and EHR system features to guide gap analysis, options, decision-making, and maintenance

Served as consultant for issues and topics related to an electronic health record; Served as a conduit for aligning resources and activities related to EHR topics and issues

Worked with Directors and Management to support clinical/operational activities in implementation, testing, and activation of EHR software

Provided support to the EMR Director who can support office sites and train for Epic, Cerner, and Athena EMR workflows.

Supported work effort during optimization and ongoing maintenance of EHR software

Participated in the review and testing of major releases and upgrades, evaluating new functionality and master file changes for new features.

Coordinated new application functionality with the training team. Worked with team to develop supporting materials as needed and aids team during training

Supported communication and analysis for maintaining master files, end-user access, and security files.

Responded to user level support questions related to the EHR. Escalated high-level application/technical questions to Director of EMR.

Developed and documented internal procedures in coordination with internal departments and affiliate hospitals and clinics

Assured clinical content meets HIPAA regulatory and compliance requirements

Provided on-site support before, during and post Go-Lives.

SKILLS

Collaboration Tools: JIRA/Confluence, Remedy and Emass.

Audit Tools: ZenGRC, Workiva (wDesk), AuditBoard and Archer.

Microsoft Office 365/Access Windows Server/AD

SharePoint and VMware

Demonstrated ability to work effectively in a fast-paced environment under deadline pressure.

Demonstrated ability to manage competing priorities.

Demonstrated ability to build partnerships with various teams.

Ability to communicate well and work in a collaborative team environment.

Ability to work with highly technical and independent team members.

EDUCATION

University of Uyo

Bachelor of Science – Business Information Systems/Sociology

CERTIFICATIONS AND LICENSES

Certified Information Systems Auditor (CISA)

Certified Information Security Manager (CISM)

CompTIA Security+

Contact this candidate