It Auditor Cyber Security

DERRICK AKWEI (CISA)

MOBILE. : +1-646-***-****

E-MAIL. : ********@*****.***

EXECUTIVE PROFILE

Forward-thinking global Information Security professional, experienced in interfacing with Senior level Management and information technology (IT) stakeholders. Result-oriented Senior GRC Analyst with over 4+ years of overall experience. Hands-on experience with CIS, HIPPAA, ITGC, ITAC, SOX 404, ISO 27001, COBIT control Testing, and SOC 2 Reviews. Proficiency in Excel.

CERTIFICATION

•Certified Information Systems Auditor (CISA)

PROFESSIONAL EXPERIENCE

GRC Analyst (Information Security) December 2020- Present MEMORIAL Sloan Kettering Cancer Center, NY, NY USA

•Conduct Risk Assessments on priority areas to identify opportunities for control enhancement and risk mitigation

•Tested operating effectiveness of controls such as Access controls, Data Back-Ups, Change Management, SDLC, DRP, BCP, and other key SOX controls.

•Performing review of application controls, such as workday HCM, Epic other relevant financial processing systems.

•Reviewed annual IT and Security policies and standards.

•Part of the team that administers Annual security awareness training through the Learning Management system.

•Effectively coordinates audits, by being the liaison between external Auditors and stakeholders.

•Performed follow-up on management commitments to mitigate identified IT risks.

•Interpreted the business impact of audit findings and communicated recommendations to various management levels.

IT Auditor November 2018-June 2020 WALMART, Hoboken, NY.

●Participate in planning for upcoming audits through a contribution of ideas on the methodology and approach for upcoming assignments based on the review of the prior year’s audit work papers, industry-standard control frameworks, and audit reports.

●Sending out audit scheduling and PBC list as part of the audit planning Phase.

●Led and performed walk-throughs during tests of the operating effectiveness of control design.

●Performed reviews on IT General Controls related to Access to Programs and Data, Program Changes, Computer Operations, and Program Development.

●Document test results on lead sheets and prepare written audit findings/issues.

●Present and discuss audit findings with IT stakeholders and internal audit management.

●Review work performed by others and provided recommendations for improvement.

EDUCATION

Year

Qualification Name

University Name

Location

Aug. 2009: June 2013

BS (Accounting)

St Josephs University

Brooklyn, NY

TECHNICAL EXPERTISE

•Information Technology General Controls (ITGC) Audits

•SQL Queries

•Linux, Windows, Mac OS

•Working MS Office Suite (Word, Excel and Power point).

•Ability to review system changes for security implications and recommending improvements in understanding of cyber security methodologies.

Contact this candidate