.
CONTACT
Dallas, Texas *****
*********@*****.***
SKILLS
FRAMEWORK: COBIT COSO PCI-DSS SOX SOC 1, 2
&3 NIST SP 800-53 Rev 5 FISMA FISCAM ISO
***** ******* **** **** ***** IPPE OCC HIPAA HITRUST.
APPLICATION: GRC – Archer Metric stream Splunk
ADP sail point Sharepoint Azure cloud AWS Oracle Jira IDEAL Oracle Dynamic legacy
Randomizer Salesforce.
CERTIFICATIONS
Certified Information Systems Auditor (CISA)
Certified Scrum Master (CSA)
LANGUAGES
English
Full Professional
Process-oriented professional with extensive Compliance experience, who executes thorough IT audits and control testing procedures to ensure maximum compliance with desired IT industry standards like SOX, COBIT, COSO, FISMA, ISO 27001, FISCAM, ITIL, NIST 800-30, and FFIEC. adept at managing end-to-end SOX IT audit procedures, RCSA testing,including planning the engagement, determining the scope, identifying risks and controls, designing the audit program, managing tests, and evaluating the results. Thorough understanding of the design of control testing and auditing components, with the capacity to advise internal teams on optimizing the efficiency of audit controls and lowering risks. 5years of IT audit with good knowledge of audit frameworks: SOX 404, PCI-DSS, ITIL,SOC I TYPE 1,ISO BPM. experience with audit tools, audit board, Jira, salesforce, Microsoft excel, databases, IT infrastructure, AWS, Azure, cloud computing, ACL archer Grc, Microsoft office product.
WORK HISTORY
September 2020 - Current
IT Auditor/Sox Compliance META SOURCE
Execute SOX and PCI compliance audit projects using a risk-based method to determine design and operating effectiveness of controls.
Execute cyber security audit, testing administrative, technical and physical controls for design adequacy and operating effectiveness.
Conduct IT Infrastructure audit, examining Operating Systems, Network Devices, Servers and Databases.
Evaluate Policies, Standards, and operating procedures to ensure compliance with various regulatory requirements and industry best practices/standards.
Conduct systems controls testing of various enterprise resource planning systems – Oracle financials and SAP.
Conduct evaluation of the design and performance of internal controls to assess whether the controls and underlying attributes are designed appropriately and operating effectively to mitigate risk.
Perform ITGCs and ITACs testing in accordance with departmental methodology and professional standards- ISACA and IIA.
Conduct risk assessment and management, control identification, design of audit program, procedures, testing, evaluation and analysis of audit outcome.
Involve in pre and post SDLC review, Business Continuity, Disaster Recovery and systems control testing.
November 2017 - September 2020
IT Auditor/Risk Compliance AT&T
Identified control gaps and potential remediation steps; Champion and & assist process re-design and coordination of remediation efforts.
Conducted ITGCs and IT Application controls testing to determine their design adequacy and operating effectiveness engaging COSO and COBIT frameworks.
Performed IT operations SOX controls (TOD and TOE) with a focus on controls mitigating high and medium risks.
Evaluated and monitored control processes for SOX compliance and company requirements.
Conducted I.T controls risk assessments, including reviewing organizational policies, standards and procedures and assist in communicating and facilitating the requirements for security risk assessments for both customs developed and third-party applications.
Performed walk-through and detailed testing of controls to determine if controls are properly designed and operating effectively.
Documented, assessed, and evaluated automated systems controls including interface completeness and validity, authentication and authorization, and input/ output controls to support sensitivity of data and privacy.
Facilitated and carry out HITRUST, SOC1/2, ISO 27001, FEDRAMP, SOX, and PCI/DSS compliance and certification audits engagements, data/artifact collection, exception remediation and monitoring.
EDUCATION
BTech Accounting
Ladoke Akintola University of Technology, Nigeria
.
KHALEEL OLAWOYIN