Desmond Debra-Nketiah - CISA
Boxborough, MA Email: *****************@*****.*** Cell: 401-***-****
Professional Summary
Senior IT Auditor with 5 years of experience in Internal and External Audit procedures, Strong experience in the planning, performing, and reporting of internal audit procedures. Strong understanding of ITGC and ITAC over Access, Security, Change, and IT Operation management (including Backup, Batch Jobs, and SOC Review) procedures Experienced in Enterprise Risk Management, Business and Process Audit, and Internal audit. Experienced in policy and procedure reviews, Operational and Compliance audits.
Education and Certification
Certified Information Systems Auditor (CISA)
CompTIA Security+
Institute of Management and Public Administration - M.B.A Marketing- 2011-2014
University of science and technology - B. A Sociology / Social Work – August 2004- May 2008
Skills
Risk Assessment, SOC Reports Review, SDLC, Project Management
Regulations: SOX, HITRUST, HIPPA, and PCI
Applications: SAP, ADP, and People Soft
Operating Systems: Windows OS, Linux, Unix
Frameworks: COBIT, COSO, ISO, NIST
Work Experience
Senior IT Auditor
4 Square IT Consulting, Houston TX June 2019 to Present
Understand assigned clients’ objectives as well as their regulatory and risk management environment and develops strong working relationships and communicate effectively with clients
Perform ITGC testing and conduct remediation meetings with control owners to resolve all pending issues regarding the efficacy of the control in scope
Assist internal and external auditors with audit preparation and remediation items and liaise between internal and external audit teams to ensure consistency and continuity of controls testing and remediation plans
Sets priorities, ensures daily coordination among the project team, and monitors progress against schedules, budgets, project/task deliverables, and status reporting
Conduct user access reviews as part of the compliance process and also review and test segregation of duties (SOD) and accessing control in application to ensure compliance with SOX
Coordinated with IT department and external auditors to plan annual Sarbanes Oxley (SOX) IT Testing
Ensure audit tasks are completed accurately and on time using application frameworks such as COBIT and COSO
Obtains and analyzes data as a basis for reviewing the adequacy, effectiveness, and efficiency of systems and processes
Leads IT general controls (ITGC) audits over Access Management, Change Management, Computer Operations, Governance, SDLC, etc.
Maintains the level of technical competency and professional care required for the completion of assignments in accordance with auditing standards and related control techniques
Evaluates processes and controls for compliance with relevant existing or proposed laws and regulations, established policies, plans, and procedures
Determines how to audit “through the computer” during financial and operational audits
Assess internal controls’ design adequacy to mitigate financial, operational, and compliance risks and to test their operating effectiveness
Prepares audit reports and recommends improvements to IT controls and operational processes
Delivers oral and written presentations during and at the conclusion of audits
Presents findings, risk analyses, and recommendations to executive leadership
Plans, reviews and provides direction for the work of Staff Consultants
Stays abreast of new technology, emerging risk areas, and related control techniques
Participates in pre-and post-implementation control reviews of major system development proposals
Appraises the adequacy of corrective actions taken to remediate deficiencies identified during audits
Provides exceptional service to clients remotely and in-person and always serves as a positive brand ambassador
IT Auditor
Bayspring Consulting Services, Boston MA March 2017 to June 2019
Performed IT-related, Sarbanes-Oxley, and operational audits tests in a professional manner, in accordance with the Institute of Internal Auditors (IIA) Professional Practices Framework.
Tested IT internal controls and assess the adequacy of the execution of associated key controls, systems, and processes.
Performed transaction and compliance testing to evaluate the existence, efficiency, and effectiveness of internal control procedures and adequacy of control documentation.
Assisted in oral and written presentations to management during and at the conclusion of audits, discussing deficiencies, corrective action, and improvements in internal controls.
Prepared audit work papers detailing each audit step in assigned audits.
Ensured that information is presented, concisely, accurately, in a logical format, and accordance with standards.
Interviewed control and system owners to gain an understanding of how processes and the system of internal controls operate.
Assisted external auditors, if vital, by providing direct assistance and prepared work papers and schedules.
Assisted in special projects as assigned.
Maintained updated knowledge of rules, regulations, and standards in the fields of internal audit, IT technology, and related matters of interest to the department.
Network Administrator
Bayspring Consulting Services, Boston MA November 2015 to April 2017
Assisted in maintaining centralized documentation of all infrastructure information including hardware/software licensing, and network/environment diagrams.
Monitored and acted as the first responder to all network equipment and processed malfunction service requests.
Assisted in the research of network products, services, protocols, and standards in support of network procurement and development efforts. Recommended appropriate hardware and software products to be acquired.
Coordinated and performed installation and configuration of new equipment as assigned.
Provided telephony hardware system, and end-user support.
Installed and configured client and server network software and hardware and perform software upgrades as needed.