FESTUS OGIRRI B.A (HON) CISA, CISM
Houston, TX **407 ■ 929-***-**** ■ ************@*****.***
PROFESSIONAL SUMMARY
Experienced information technology risk and assurance audit professional with over 6 years of expertise in conducting SOX audits across a broad spectrum of industries, including insurance, the public sector, energy, utilities, oil and gas, healthcare, manufacturing, and technology. Proficient in evaluating information technology general control (ITGC), IT applications, and IT infrastructure controls. Skilled in collaborating with various ERP systems, such as SAP, PeopleSoft, AWS Cloud, Calypso, and databases like Oracle and Microsoft SQL Server. Involved in a variety of audits, including SOX audits, SSAE18 projects, ITGC audits, IT infrastructure audits, data center audits, disaster recovery audits, PCIDSS audits, and cybersecurity audits. SKILLS
• IT Control Testing Control Frameworks and
Security Standards (COBIT, COSO, NIST,
ISO27001, ISO27002)
• Business Processes and IT General Controls
• Cybersecurity Testing and Vulnerability Scanning
• Risk Assessment Recovery Plan
• Problem-Solving
• Attention to Detail
• Client Relationships
• Team Leadership & Development
EXPERIENCE
Senior IT Auditor, 08/2024 – Current.
HP – Spring, TX
• Performed and managed all phases of audit activities independently, from planning to reporting, while prioritizing tasks and resolving dependencies in high-pressure environments.
• Developed and execute audit plans, ensuring alignment with organizational objectives and proper engagement with stakeholders.
• Reviewed controls deficiencies and retested SOX in-scope applications
• Performed ITGC and IT Applications control testing in risk-based audits
• Provide regular updates on audit project progress, challenges, and accomplishments to management and stakeholders.
• Coordinate and escalate unresolved audit issues to the appropriate team or management for timely resolution.
• Lead teams of auditors, analysts, and specialists, analyzing audit data and preparing comprehensive, formalized reports with actionable recommendations.
• Review and validate documentation, work papers, and findings to ensure quality and compliance, conducting post-audit evaluations to enhance processes.
• Mentor and coach team members, fostering their professional growth and improving their technical expertise during audit engagements.
Senior Technology Risk & Assurance Consultant, 03/2022 - 08/2024 Ernst & Young – Houston, TX
• Assisted in audit scope determination, risk identification, and control evaluation
• Executed audit readiness for IT General and Application control weaknesses in compliance with SOX
• Conducted test of Access control, Change Management control, IT Operations Control
• Prepared findings and recommendations report for management
• Evaluated IT operations, backup, and disaster recovery audits
• Coordinated and performed IT risk-based audits to identify control gaps and recommend areas for improvement
• Assisted team with process reviews and walk-through test to ensure that procedures are complied with in practice as laid down in the policy
• Assisted in report preparation of findings and recommendation to management
• Documented understanding of business processes in memos or flow charts. IT Auditor, 03/2018 - 03/2022
Experis Manpower Group
• Conducted audit tests, prepared work papers, and developed audit recommendations
• Performed ITGC and IT Applications control testing in risk-based audits
• Reviewed controls deficiencies and retested SOX in-scope applications
• Collaborated in planning and conducting audits of key IT and business systems
• Documented understanding of business processes and control narratives
• Organized, communicated, assessed, and reviewed internal processes for compliance. EDUCATION
Bachelor of Arts: History and International Studies, 2010 Ambrose Alli University
CERTIFICATIONS
• Certified Information System Auditor (CISA)
• Certified Information Security Manager (CISM)