Summary
Overview
Work History
Education
Skills
Timeline
Generic

David Oluyide

Jamaica,NY

Summary

A professional, detail-oriented & meticulous Information System/Technology Auditor with 5+ years of experience. A dept in performing Information Systems Audit, reviewing Business Processes, and appraising Policies and Procedures to ensure their compliance with regulatory requirements, laws, standards and alignment with business objectives. Proven ability to refine processes.

Analytical IT Audit & Compliance Analyst with strong strategic planning, problem solving and project management abilities.

Overview

5
5
years of professional experience
4
4
years of post-secondary education

Work History

IT Auditor

EisnerAmper
New York, NY
07.2018 - Current
  • Participate in the planning of internal audits by collaborating with IT and business management to develop control walkthrough narratives, the matrix of key controls, testing approach, and schedule.
  • Executing audit procedures including leading interviews, requesting, reviewing, and analyzing evidence, and documenting test steps in detailed, well-supported work papers.
  • Support audit reporting and issue remediation efforts, including tracking the status of open issues and other IT-related findings.
  • Overseeing the SOX, PCI-DSS & SOC 2 compliance program.
  • Conducting testing, readiness assessment & gap analysis on PCI-DSS, SOX & SOC 2 annual recertification process.
  • Assisting with the testing of IT general controls related to SOX compliance as needed.
  • Leading interactions with external auditors.
  • I manage the enterprise-wide vulnerability program
  • Assisting and leading the planning and execution of projects in internal controls over financial reporting (ICFR) and internal audits.
  • Planning and leading collaborative risk-based IT audits and concluding whether risks are appropriately managed through the existence of effective control or other techniques.
  • Coordinating and maintaining management’s compliance process controls documentation and review controls regularly to ensure adequate design and identification of key controls for processes that affect the company
  • Supporting stakeholders in determining the appropriate treatment of identified risks and gaps; identifying appropriate action plans for risk remediation
  • Defining and documenting business process responsibilities and ownership of the controls in the GRC tool.
  • In charge of SIG Questionnaire answering for all third parties and vendors.
  • Conducting security awareness training for new hires.
  • Lead the implementation of Unified Compliance Framework project for SOX, PCI-DSS, SOC 2 & ISO 27001
  • Quickly learned new skills and applied them to daily tasks, improving efficiency and productivity.
  • Carried out day-day-day duties accurately and efficiently.
  • Demonstrated respect, friendliness and willingness to help wherever needed.

Education

Bachelor of Science - MARKETING AND BUSINESS STUDIES

LAGOS STATE POLYTECHNIC
LAGOS NIGERIA
01.2008 - 11.2012

Skills

  • Experienced in executing IT audits in a large and complex IT & business environment
  • Experienced in environments with technical compliance practices, common IT/Tech regulatory frameworks and laws such as NIST, GDPR, CCPA, ISO, SOC 1 & 2, SOX, HIPAA, PCI-DSS, COBIT, CIS20, PIPEDA, etc
  • Experienced with auditing/consulting and business process improvements
  • Excellent understanding of business and IT processes
  • Able to conduct audit research, technical interviews, write audit reports and provide regular updates to internal management and clients
  • Able to evaluate and communicate control results, best practices, and risks to stakeholders
  • Knowledge of Audit assurance, governance and control frameworks such as COBIT, NIST, ITIL and ISO, Service Organization Controls (SOC) Reporting standards sufficient to interpret and apply IT risk and control concepts
  • Experienced with GRC platforms (ServiceNow, RSA Archer, etc)
  • Able to work independently and as part of a team, managing multiple priorities within tight deadlines
  • Able to easily translate business requirements into technical solutions and vice versa
  • Excellent verbal and written communication, facilitation, and interpersonal skills
  • Understand and apply audit methodology and professional practices
  • Ability to identify and communicate opportunities to reduce risk and improve the overall effectiveness and operational efficiency of the organization
  • Perform proactively on issue management items approaching the deadline for closure and perform the validation procedures within the specified timeframe
  • Able to lead business and departmental projects that require analytical and risk assessment skills
  • Actively staying abreast of emerging issues involving IT audit, changes in technology, and evolving cybersecurity laws and regulations that could impact the organization

Timeline

IT Auditor

EisnerAmper
07.2018 - Current

Bachelor of Science - MARKETING AND BUSINESS STUDIES

LAGOS STATE POLYTECHNIC
01.2008 - 11.2012
David Oluyide