Internal Audit Risk Management

PORTLAND, OR• ************@*****.*** • 1-786-***-****

FUSEINI ALHASSAN

Lead Operational/Finance Audit/Internal Audit

PROFESSIONAL SUMMARY

Dynamic and results-driven Audit Director with deep expertise in Finance, Operational, and IT audits, grounded in IPPF, GAAP, GAAS, COSO, and SOX frameworks. Adept at leveraging K10 Vision, RStudio, DB2, and ISO 27001 to strengthen risk management, enhance compliance, and elevate audit performance. Proven leader in driving strategic insights, optimizing internal controls, and championing continuous improvement across audit and IT finance environments.

EMPLOYMENT HISTORY

DIRECTOR OF INTERNAL AUDIT 2023 -PRESENT

Brooksources -Confederated Tribes of Grand Ronde Grand Ronde, OR

Develop, implement, and maintain a risk-based annual audit plan aligned with organizational priorities.

Lead and manage the internal audit team in planning, execution, and reporting of financial, operational, compliance, and IT audits.

Evaluate the adequacy and effectiveness of internal controls and recommend improvements.

Report audit findings, risk exposures, and recommended corrective actions to executive management and the Audit Committee.

Ensure compliance with applicable laws, regulations, standards (e.g., IIA Standards), and internal policies.

Monitor and report on management’s progress toward resolving control deficiencies and audit findings.

Provide advisory services related to internal controls, risk management, and business process improvement.

Coordinate and liaise with external auditors, regulators, and other assurance providers.

Lead investigations of suspected fraud, misappropriations, or irregularities as necessary.

Oversee the development of the internal audit function, including staff training, development, and performance management.

Maintain current knowledge of industry trends, risks, and best practices relevant to internal auditing

INTERNAL AUDIT MANAGER2021 -2023

Symbotic RoboticsWilmington, MA

Directly supervise and oversee the day-to-day operations of the business process audit team.

Support SOX 404 business process controls program implementation, lead management testing of controls, and coordination with external auditors.

Develop and perform audits as part of the Symbiotic risk-based audit plan, including planning, scoping, supervising fieldwork, and reporting.

Effectively communicate audit findings both verbally and in written audit reports, providing direction on remediation efforts and tracking the implementation and effectiveness of action plans through completion.

Facilitate annual enterprise risk assessment based on the COSO framework.

Partner cross-functionally to guide significant process changes, control, and process improvements.

Improved Detection: MAR tools enhance our ability to spot unauthorized access swiftly.

Efficient Response: Integration of MAR streamlines incident handling for prompt resolution.

Compliance Assurance: MAR ensures regulation adherence, bolstering trust and reducing risk.

Promote the brand of Internal Audit through quality audit work and relationship building with Finance and other departments across Symbotic.

Implemented NIST CSF to enhance risk management by identifying and prioritizing cybersecurity risks based on the framework's comprehensive approach.

Successfully adopted NIST CSF as a cybersecurity framework, aligning organizational policies and practices with its core functions—Identify, Protect, Detect, Respond, and Recover.

Demonstrated commitment to continuous improvement by regularly assessing and updating cybersecurity measures by NIST CSF, ensuring the organization's resilience against evolving cyber threats.

Comprehensive Information Security Management System (ISMS): Established and maintained an ISO 27001-compliant ISMS, demonstrating a systematic approach to managing and protecting sensitive information assets.

Implemented ISO 27001's risk-based approach to security controls, identifying and mitigating information security risks through a structured and measurable framework.

Demonstrated commitment to ongoing compliance and improvement by regularly conducting audits, assessments, and reviews aligned with ISO 27001 requirements, ensuring the organization's information security practices evolve with the dynamic threat landscape.

SENIOR INTERNAL AUDITOR 2019 - 2021

Bank of AmericaSalt Lake City, UT

Gather and manage various data, including product and process performance.

Conducted JSOX in relation to sections 302 responsible for financial reports and 404 management assessments of internal Controls.

Performs Financial Audit by reviewing financial statements identifying errors within corporate documents.

Conduct Cybersecurity audits around firewalls, Unix, Windows, Operating Systems and Databases.

Provide information, make recommendations and work with other departments.

Performs Contracting and Procurement Audit reviewing the contracts, Statement of Work, and the bidding processes.

Participate in privacy forums, build internal partnerships across PG&E and help ensure that privacy protection is embedded in PG&E's fundamental business practices and policies.

Led the day-to-day execution of internal audit engagements and projects, including SOX and compliance and operational audits.

Analyze company data trends including sales, returns, logistics/sourcing and customer service. (Play a leadership role to help guide and coach sales team)

Create and maintain reports using multiple reporting tools, including NetSuite, Excel, Power BI

Evaluate the current data that is in Net suite and be a leader in data cleanup and discussions of data. gaps in the system and help implement new processes of how to manage data in our system.

Teach and train employees how to use current data reporting and visualization tools including Net suite, Excel, Power BI

Understand the architecture of RST systems and work with departments to clearly define them. data needs, determine effective solutions, implement them, and then track the results and improve upon them

• Maintain end-of-life cycle item process including creating reports for multiple groups including. Sales, finance, and others, lead meetings to discuss a • Assist in the preparation of compliance reports for the board of directors.

develop and perform audits to assess compliance with Anti-Money Laundering (AML) regulations, including evaluating transaction monitoring systems, customer due diligence processes, and the effectiveness of internal controls designed to prevent money laundering, assign tasks, and ask to inactivate items in the system.

GLOBAL LEAD INTERNAL AUDITOR2018 - 2019

SchlumbergerHouston, TX

•Plan and conduct domestic and international audit engagements in line with the internal audit program, identify risks, process deficiencies of IT solutions or processes, and manage the delivery of audits.

•Conducted JSOX about sections 302 responsible for financial reports and 404 management assessments of internal Controls.

•Communicate with and educate process owners on the importance of controls, an effective control environment, and the role of internal audit.

•Provide coaching and support to directors and officers on privacy strategies and approaches to implement within the organization.

•Benchmark the program to identify the best practices in these areas and lead the implementation of significant enterprise wide cultural and program changes, improvement, and enhancements.

•Participate in privacy forums, build internal partnerships across PG&E and help ensure that privacy protection is embedded in PG&E's fundamental business practices and policies.

•Implemented NIST CSF to enhance risk management by identifying and prioritizing cybersecurity risks based on the framework's comprehensive approach.

•Successfully adopted NIST CSF as a cybersecurity framework, aligning organizational policies and practices with its core functions—Identify, Protect, Detect, Respond, and Recover.

•Demonstrated commitment to continuous improvement by regularly assessing and updating cybersecurity measures in accordance with NIST CSF, ensuring the organization's resilience against evolving cyber threats.

•Perform one-trust hypothetical scenarios for the collateral manager before GCS review.

•Develop and implement strategies to increase the scope of services to existing and potential clients and manage the unit budget by increasing revenue, controlling costs, and reducing expenses.

•Performed a Cloud Security Qualification Process audit, overseeing that it conformed and complied with the organizational standards.

•Provide overall leadership, supervision, coaching, and development to team members to drive performance improvements.

•Comprehensive Information Security Management System (ISMS): Established and maintained an ISO 27001 compliant ISMS, demonstrating a systematic approach to managing and protecting sensitive information assets.

•Implemented ISO 27001's risk-based approach to security controls, identifying and mitigating information security risks through a structured and measurable framework.

•Demonstrated commitment to ongoing compliance and improvement by regularly conducting audits, assessments, and reviews aligned with ISO 27001 requirements, ensuring the organization's information security practices evolve with the dynamic threat landscape.

•Notable achievements while in the position have included: Improving site performance by 10% through the removal of cumbersome user issues.

MONITORING & EVALUATION COORDINATOR 2015 - 2018

Eni Ghana Exploration and Production Ltd/ IFC/World Bank Ghana

•Coordinate and manage project activities to ensure timely delivery and adherence to project objectives.

•Assist in developing and implementing project plans, schedules, and budgets.

•Monitor project progress and performance, providing regular updates to stakeholders.

•Prepare and maintain comprehensive project documentation, including reports, plans, and schedules.

•Facilitate communication and collaboration among project team members, stakeholders, and external partners.

•Support project managers in identifying and mitigating risks and resolving issues.

•Organize and participate in project meetings, preparing agendas, minutes, and follow-up actions.

•Ensure compliance with IFC/World Bank policies, procedures, and standards.

•Assist in procuring and managing project resources, including vendors and contractors.

•Track and manage project expenses, ensuring adherence to budgetary constraints.

•Coordinate and support the preparation and submission of project proposals and funding requests.

•Maintain project management tools and systems, ensuring accurate and up-to-date information.

•Assist in the evaluation and selection of project management methodologies and tools.

•Provide administrative support to project managers, including scheduling, travel arrangements, and correspondence.

•Develop and deliver project-related training and orientation to team members and stakeholders.

•Conduct research and analysis to support project planning and decision-making.

•Liaise with internal and external stakeholders to ensure alignment and effective communication.

•Support the development and implementation of monitoring and evaluation frameworks.

•Contribute to identifying and sharing projects with the best practices and lessons learned.

•Ensure proper documentation and archiving project records and materials.

•Support the development and implementation of stakeholder engagement strategies.

•Assist in the preparation and dissemination of project communications and reports.

•Participate in project audits and reviews, providing required documentation and information.

•Foster a collaborative and inclusive project team environment.

EDUCATION

Pursuing DOCTOR OF PHILOSOPHY IN CYBERSECURITY (GOVERNANCE, RISK & COMPLIANCE) 2025

National University

MASTER’S IN SUPPLY CHAIN MANAGEMENT 2024

Florida Atlantic University, Boca Raton

Emphasis:

Business Innovation with Artificial Intelligence, Supply Chain Management, Business Analytics Big Data, Project Management, Supply Chain, Data Management Analysis with Excel, Strategy Procurement, Communication Strategy for Business Professionals, Operations Management and International Shipping, Trade and Port Management

SKILLS

Financial, Operational, Compliance Audits, Risk Assessments, ERP Systems, Regulatory Compliance, IT Governance, Audit Strategy, GRC, Internal Audit, GAAS, GAAP, IPPF, GLBA, SOX, NIST, ISO 27001, Oracle Financials, SAP, Peoplesoft, Windows, LINUX, UNIX, MYSQL, DB2, Oracle SQL, Firewalls, Routers, COBIT, COSO, GDPR, HITRUST, PCI-DSS, RStudio, PowerBI (Experienced), Tableau (Experienced), AzureDevops (Experienced), TeamMate+ (Experienced), Audit board (Experienced) GRC Platforms (ServiceNow GRC, RSA Archer) Experienced in cloud governance, DevSecOps, K10 Vision, ACL, IDEA, QuickBooks.

ADDITIONAL INFORMATION

CERTIFICATIONS

Certified Information Systems Auditor (CISA)

Certified in Risk and Information Systems Control (CRISC)

Certified in Project Management Professional (PMP)

Certified Internal Auditor (CIA)

Certificate from the National Society of Leadership and Success

REFERENCES

Hon. Emmanuel Armah-Kofi Buah

Member of Parliament, Ellembelle Constituency

Minister for Lands & Natural Resources

Email: ******@*****.***

David Wood

Snr. Director of Internal Audit

Brooksources

Email: *.****@************.***

Gideon Tibilah

Manager - IT

Eni Ghana Exploration & Production Ltd

Email: ******.*******@********.***.***

Contact this candidate