Risk Management It Audit

AZEEZ. A. ONILEGBALE, MBA, CA, CISA.

New Jersey,

Phone (cell): 916-***-****. E-Mail: **********@*****.***

PROFESSIONAL SUMMARY

Results-driven and detail-oriented IT Auditor with extensive experience in governance, risk management, compliance, and IT control evaluations. Adept at conducting comprehensive compliance testing, executing risk assessments, and working collaboratively with business stakeholders to strengthen IT security and regulatory adherence. Skilled in IT audit methodologies, cloud security, and regulatory frameworks such as CIS, SOC 2, NIST CSF, and NY DFS. Proven ability to identify control weaknesses and drive remediation efforts to enhance operational effectiveness.

SKILLS

Governance, Risk, and Compliance (GRC) Enterprise Risk Management IT Audit & SOX Compliance Risk Management & Governance Analytical Thinking & Decision-Making IT General & Application Controls Testing Process Documentation & Walkthroughs SOC Audits (1,2,3) Stakeholder Communication & Reporting Regulatory Compliance & Audit Methodologies Team Leadership & Mentoring IT Audit planning & Execution Detail oriented with ability to multi-task Cloud Security (AWS, Azure, GCP) IT GRC Platforms Regulatory Compliance (NY DFS, CCPA/CPRA.

FRAMEWORKS

COBIT COSO ISO 27001 SOC 1,2 & 3 NIST SP 800-53 GDPR NIST SOX

APPLICANTIONS

ServiceNow SharePoint Word Excel PowerPoint Teammate Windows ACL

EXPERIENCE

IT Audit & Compliance Analyst ABI Financial Services LLC, Severn, MD Aug 2021-Present

•Leveraged COBIT, COSO, NIST, ISO, frameworks, and standards in performing various risk-based audit projects.

•Led and executed comprehensive IT audit engagements, including SOX compliance, IT General Controls (ITGC), and security configuration reviews.

•Conducted cross-organizational risk assessments to identify and mitigate IT-related risks.

•Maintained a repository of IT audit issues and corrective action plans, providing timely updates to management on outstanding risks.

•Prepared detailed audit scope, reports and presented actionable recommendations to senior management.

•Led and executed IT audits across diverse technology platforms, ensuring comprehensive coverage of general controls such as system development and change management.

•Collaborated with IT teams, and key stakeholders ensuring audit findings were communicated and acted upon.

•Track and follow up on implementing management's action plans, ensuring gaps are properly closed.

•Executed full-cycle IT audits, including planning, fieldwork, and reporting on ITGC and application controls, ensuring audits align with internal standards and business requirements.

•Provided guidance and training to junior team members, enhancing IT audit expertise within the organization.

•Contributed to department initiatives, including training, policy updates, and process enhancement projects, improving audit efficiency.

•Prepared and documented concise work papers during walkthroughs and detailed testing that captured risks and mitigating controls implemented.

•Planned and conducted IT audits, including SOX 404, SOC 1 & SOC 2, and compliance testing to evaluate security, access controls, and disaster recovery readiness.

Senior IT Auditor Wells Fargo Bank Nov 2019- July 2021(Contract)

•Led and executed comprehensive IT audit engagements, including SOX compliance, IT General Controls (ITGC), and security configuration reviews.

•Conducted walkthroughs and detailed testing of Information Technology General Controls (ITGCs) and IT Application Controls (ITACs) to determine design appropriateness and operating effectiveness, identified and mitigated gaps.

•Presented audit results to senior management and created recommendations to fix identified Audit risks and enhance overall organizational security posture.

•Prepared and documented concise work papers during walkthroughs and detailed testing that captured risks and mitigating controls implemented, improving audit documentation accuracy and ensuring thorough compliance with internal audit standards.

•Conducted End-to-End Audits: Perform detailed testing, facilitate meetings, and document and review the results of testing according to internal audit methodology.

•Tracked and assessed the closure status of identified issues, ensuring timely resolution of Audit issues.

•Executed IT control testing in accordance with CIS, NIST CSF, and NY DFS standards, identifying weaknesses and recommending remediation plans.

•Reviewed and analyzed automated evidence collected via GRC platforms, ensuring compliance and accuracy in control documentation.

•Developed and maintained effective relationships within the Internal Audit team and across departments, while providing mentorship that increased team expertise.

Audit Manager- Credit Risk First Bank Nigeria Limited April 2016 -Oct 2019

•Facilitated comprehensive process audits across all credit departments, ensuring adherence to Standard Operating Procedures (SOPs).

•Pioneered follow-up audits, tracking and documenting the implementation rate of recommended improvements.

•Analyzed audit outcomes into executive summary reports, delivered critical insights that informed management decisions, and compiled monthly activity reports reflecting departmental performance metrics.

•Implemented and maintained adherence to SOX requirements, reducing compliance issues.

•Collaborated with cross-functional teams to integrate risk management practices into business processes and increase operational resilience.

•Developed and completed work papers that accurately documented audit procedures, test results, and control exceptions, improving report clarity and accuracy.

•Presented audit findings to senior management, highlighting control weaknesses and providing actionable recommendations to enhance operational efficiency and mitigate risk.

Team Lead, Audit & Control Africa Subsidiaries First Bank Limited May 2017 – Jun 2018

•Orchestrated a detailed evaluation of internal audit and control review activities across subsidiary branches and head office departments, ensuring alignment with First Bank Group's framework and guidelines.

•Conducted an in-depth analysis of subsidiary internal control systems, uncovering and rectifying operational gaps to bolster process adequacy and effectiveness.

•Led targeted training initiatives for subsidiary staff, significantly enhancing awareness of key audit and control issues, thereby strengthening the bank's operational integrity.

•Compiled and presented comprehensive audit reports to management, effectively detailing findings and influencing the successful implementation of recommended enhancements.

•Oversaw quality assurance and improvement reviews of internal audit work as required.

•Monitored the implementation of management-approved recommendations, ensuring timely completion of corrective actions and contributing to improved adherence to agreed timelines.

•Conducted detailed audit fieldwork both independently and collaboratively, identifying control deficiencies that led to significant improvements in risk management processes

EDUCATION

MBA: Financial Management

HND: Accountancy

PROFESSIONAL CERTIFICATIONS

Certified Information Systems Auditor - CISA

Institute of Chartered Accountants of Nigeria - CA

Contact this candidate