Summary
Overview
Work History
Education
Skills
Certification
Timeline
Hi, I’m

Adedoyin Dada

JONESBORO,GA
Adedoyin Dada

Summary

Result Driven Information Technology professional with specialties in Internal IT Auditing, Information Security Compliance, Risk Management, and with proven experience in reducing operational risks by identifying vulnerabilities within information technology business realms. Professional work experience includes client in financial services, media and entertainment, energy, manufacturing, technology, and IT service provider industries.

Equipped with many years of strong IT background and actual experience in various IT solutions (Server implementation, administrator and maintenance, Network implementation and maintenance, Backup/Restore, Software/Hardware installation and maintenance, printer repairs and maintenance, and others, I am positive that my professional experience and exposure will be a great asset to your organization

Overview

9
years of professional experience
1
Certification

Work History

CYBERSOFT TECHNOLOGIES CORPORATION

Senior IT Auditor -SOX Specialist
01.2020 - Current

Job overview

  • Responsible for IT side of annual SOX project from planning, field work, testing, report findings, remediation process.
  • Perform risk assessment for ICOFR, generate PBC list, build Sox tracker, perform testing of controls, report findings, support to develop mitigating action plan, recommend areas of improvements including policy inputs for gaps discovered in walkthrough.
  • Analyzed incident response, foreign threats, firewall attempts, DoS attack,
  • Responsible for identifying and escalating vulnerability assessment and Penetration testing results.
  • Performed risk assessment; audit planning, developing scope, schedule audit and reporting of findings noted during assessment.
  • Perform risk assessment of new system on-boarding both pre-implementation, post-implementation and control design.
  • Support review of IT tools, control designs, and control remediation planning efforts.
  • Reviewed entity’s access control policy (software and physical) to determine its adequacy and effectiveness.
  • Documented application security controls (Review and analyze audit evidence) processes and procedures.
  • Reviewed and recommended industry best practice in areas of user access and password security.
  • Assisted in documenting physical access controls to computer resources by evaluating existing environmental security, conditions, and available emergency procedures.
  • Determined which regulatory and/or compliance requirements apply to specific system.
  • Performed tests to validate Integrity and effectiveness of IT controls that are in place.
  • Perform supervisory role and mentorship to associates.

CYBERSOFT TECHNOLOGIES CORPORATION

IT Compliance Analyst
01.2018 - 12.2019

Job overview

  • Perform IT Compliance auditing for SOX, SSAE18, ITGCs projects, and IT Infrastructures.
  • Analyzed incident response, foreign threats, firewall attempts, DoS attack,
  • Responsible for identifying and escalating vulnerability assessment and Penetration testing results.
  • Presented identified risks to the Risk & Compliance team.
  • Reviewed and recommended industry best practice in areas of user access and password security.
  • Performed tests to validate Integrity and effectiveness of IT controls that are in place.
  • Evaluated and reviewed business continuity planning of organization to determine adequacy and effectiveness.
  • Reviewed adequacy and effectiveness of independent Auditors Attestation report (SSAE 18) in satisfying client control requirement at client engagements.
  • Reviewed adequacies of key systems and application controls – Access control, Data Integrity, Segregation of duties, disaster recovery, and change management among others.
  • Reviewed systems and application strength and weakness as well as recommend appropriate compensatory controls to mitigate against any potential risk.
  • Reviewed entity’s access control policy (software and physical) to determine its adequacy and effectiveness.
  • Documented application security controls (Review and analyze audit evidence) processes and procedures.
  • Performed test for data migration: unit test, interface test, and system test.
  • Worked with audit teams for planning and scope assessments for SOX testing.

DOYENOK NIGERIA LTD

Senior IT Auditor
06.2014 - 11.2017

Job overview

  • -Performed audit scheduling, audit planning, write audit papers and report with minimal supervision by audit manage
  • -Reviewed and tested for Segregation of Duties (SoD) and access control in System components in compliance with SOX.
  • -Tested Application Controls, including both Logical and Physical Access controls to ensure effectiveness of functionality, good reporting and interfaces.
  • -Review and Test back up, Disaster Recovery and scheduling procedure for appropriateness.
  • -Review change management procedure in logical IT environment and validate appropriateness of changes.
  • -Review Network security arrangement and ensure compliance to CIA standard.
  • -Assisted various departments in risk management, process of tracking customer interaction, and identifications of existing SLAs and their status.
  • Provided advisory support to Implementation and assessment of security and business process controls.
  • Review adequacy and effectiveness of independent Auditors Attestation report (SSAE 18) in satisfying client control requirement on it
  • Perform Audit Log reviews to test controls around user activity and/or login/logout attempts.
  • Prepare summary of findings and exceptions and reference all relevant documents.
  • Review and update procedure for adding and deleting users to determine username and password security.
  • Review change management documentation, policies, SOX controls and implemented necessary changes to review processes.
  • Communicate weekly with IT on status of outstanding audit recommendations, both internal and external; and facilitates timely remediation.
  • Communicate effectively with all levels of management to ensure full understanding of IT objectives, risks and controls.
  • Participate in new system development and implementation by reviewing projects documentation, conducting interviews and assessing works completed; ensured development efforts were following organization policies, standards, procedures and controls are adequately incorporated into system.
  • Review and test users’ access control – physical access relating to server room or data center, and logical access control relating various applications, operating systems, database, networks and Active Directory.
  • Determine root cause of identified issue during assessment of ITGCs to evaluate risks impact.

Education

Federal University of Technology, Akure
Nigeria

MBA from Business Administration

University of Lagos
Nigeria

Post Graduate Diploma from Computer Science

University of Benin, Benin City
Nigeria

Bachelor of Science from Mathematics

Skills

IT general controls

ERM Controls

SOX 404

PCI-DSS Compliance

Third party Risk Management

Incident Management

Change Management

Disaster Recovery

HIPAA Compliance

NIST 800-53

ISO 27001 Compliance

Writing audits reports and Training on IT industry’s best practices

Certification

CISA


Timeline

Senior IT Auditor -SOX Specialist

CYBERSOFT TECHNOLOGIES CORPORATION
01.2020 - Current

IT Compliance Analyst

CYBERSOFT TECHNOLOGIES CORPORATION
01.2018 - 12.2019

Senior IT Auditor

DOYENOK NIGERIA LTD
06.2014 - 11.2017

Federal University of Technology, Akure

MBA from Business Administration

University of Lagos

Post Graduate Diploma from Computer Science

University of Benin, Benin City

Bachelor of Science from Mathematics
Adedoyin Dada