ABBEY KOMOLAFE
Dallas Texas 469-***-**** *********@*****.***
Summary
I am an experienced Information Technology audit professional that pays full attention to details. I have a proven ability to lead, communicate and develop excellent client engagement and relationship. I have over 5 years of experience performing IT General Controls (ITGC) reviews to ensure controls are designed appropriately and operating effectively as designed. I have experience in IT Audit and Advisory, PCI DSS Audit, Governance, Risk & Compliance, SOX, SOC, and GDPR Audits.
Skills
Frameworks: COSO, COBIT, NIST 800-53, ISO 27001, Sarbanes-Oxley (SOX) 404, SOC 1,2, & 3, PCI
DSS, HIPAA, and SSAE18 formerly (SAS70)
Applications: PeopleSoft ERP, JIRA, Confluence, Oracle ERP, ACL, IDEA, SharePoint, Nessus, and Box
Operating Systems: Windows, UNIX, Linux
Experience
IT AUDITOR/ CONSULTANT 03/2022 - Current
BOOST MOBILE DALLAS TX
Reviews IT General Controls (ITGC) and various apps, databases, operating systems and network devices.
Executes ITGC testing for PCI-DSS compliance audit and Service Organization Control (SOC) reports in compliance/SSAE18 (formerly SAS70) while auditing Windows and UNIX logical access controls, and administrative access review.
Conducts testing of Sarbanes-Oxley (SOX) and SOC / SSAE 18 Review, using AICPA Guide, COSO, COBIT, and NIST 800- 53 frameworks.
Identify and communicate IT audit findings to senior management and business owners.
Maintains good working relationship with the business process owners, management, and staff at all levels to perform audit service.
Performs all stages of audit planning, fieldwork, execution, reporting and follow up.
Performs walkthrough of controls and evaluating operating effectiveness of controls.
Performs and document audit activities in accordance with professional standards such as COBIT, COSO and SOX internal control frameworks.
Participates in special projects such as Segregation of Duties (SOD) and SOX Compliance business challenge projects and identify conflicts or inadequate internal controls and provide recommendations.
Performs assessment of IT internal controls as part of financial statement audit, Internal and operational audits, Attestation engagement, and Audit readiness.
Provides recommendations for remediation of the identified risks and vulnerabilities.
Tests compliance with company policies and procedures to ensure it conforms to industry standards.
IT INTERNAL COMPLIANCE ADITOR 02/2020 - 01/2022
Dish Network Corp
Effectively communicated and implemented all Internal Control policies and procedures to the branches that greatly reduced quarterly exceptions.
Worked with various business unit representatives and process owners to review and test internal systems and processes.
Contributed to internal control policies and conducted training of branch staff on control objectives.
Performed walkthroughs, Reviewed and tested internal controls and processes.
Reviewed and examined documents presented by customers.
Evaluated internal compliance testing programs for completeness.
Identification and implementation of continuous process improvement aimed at enhancing excellent customer service.
Maintained and updated appropriate work papers on result of failed controls, testing performed and appropriate remediation.
Worked on special projects as assigned by superior.
IT Auditor
AMERICAN AGCREDIT
3/2019 TO 9/2019
.Documented control weaknesses and related testing exceptions including relevant controls in ERP (SAP) business processes.
Participated in all phases of IT audit process from planning phase to follow-up.
Prepare work papers documentation based on the work performed.
Execute Sarbanes-Oxley 404 (SOX) compliance and Service Organization Control (SOC1 Type
Ability to perform SOC Audit and issue SOC Reports in accordance with the SSAE 18 Standards.
Ability to review SOC Reports issued by clients' service auditors
Performed audits using COBIT, COSO, PCI DSS, SSAE 18 and SOX Frameworks
Education and Training
University of ILORIN Bachelor of Science
Information Technology, 07/2016
certification/affiliation
• Certified Information Systems Auditor (CISA)
• Member of Information Systems Audit and Control Association (ISACA)