Summary
Overview
Work History
Education
Skills
Certification
Timeline
CustomerServiceRepresentative
DEJI ADEOSUN

DEJI ADEOSUN

Allen,TX

Summary

Knowledgeable and experienced IT auditor, specializing in auditing various operational and integrated audit engagements, ranging from testing and reviewing IT general controls (ITGC) to SOX 404 audit, SOC 1,2 & 3, PCI-DSS audit, marine inspection & compliance audit, IT Audit on Advisory, Governance, Risk & Compliance to ensure controls are properly designed and operating consistently(effectively) as designed. I am a proven team-worker and possess an ability to lead, communicate and develop excellent client engagement and relationship.

Overview

12
12
years of professional experience
1
1
Certification

Work History

SENIOR ANALYST-THIRD PARTY RISK

Bnp Paribas Bank
New York, NY
07.2020 - Current
  • Plan and conduct security risk assessments for all third party vendors/suppliers
  • Reviewed and validated all controls at the vendor site to ensure data confidentiality
  • Review all essential security policies and procedures documentation
  • Categorizing information systems with reference to guidelines from FIPS 199 and NIST SP 800-60
  • Reviewed and scored risk and authorization management program assessment responses
  • Reviewed third party and reports{SOC2 TYPE 2,ISO 27xxx,CSA STAR etc}
  • Utilizing the internal ISO based risk assessment process to perform the risk assessment through the entire lifecycle;Kickoff,assessment,report completion,report delivery,capture and manage findings and remediation responses/dates, and provide consultation on finding and remediation that may come from other assessments
  • Provide detailed reports of assessments to business owners and the vendor management office.
  • Mapped processes to holistically examine business flow and identify improvement opportunities.
  • Performed system analysis, documentation, testing, implementation and user support for platform transitions.
  • Documented procedures and business processes and shared information with appropriate stakeholders.

IT INTERNAL AUDITOR

IMPACT ENCRYPT INC
DALLAS, TX
12.2017 - 05.2020
  • Reviews IT General Controls (ITGC) and various apps, databases, operating systems and network devices
  • Executes ITGC for SOX testing, performs PCI-DSS compliance audit, and Service Organization Control (SOC) reports SSAE18 (formerly SAS70)
  • Identify and communicate IT audit findings to senior management and business owners
  • Maintains good working relationship with business process owners, management, and staff at all levels to perform audit service
  • Performs all stages of audit including planning, fieldwork, execution, reporting and required follow-up
  • Performs walkthrough of controls and evaluating operating effectiveness of controls
  • Performs and document audit activities in accordance with professional standards such as COBIT, COSO, ISO 27001, NIST 800-53, and SOX internal control frameworks
  • Participates in special projects such as Segregation of Duties (SOD) and SOX Compliance business challenge projects to identify conflicts or inadequate internal controls and provide recommendations
  • Tests compliance with company policies and procedures to ensure it conforms to industry standards.
  • Performs assessment of IT internal controls as part of financial statement audit, Internal and operational audits, Attestation engagement, and Audit readiness.
  • Investigated discrepancies discovered during auditing process.
  • Provides recommendations for remediation of identified risks and vulnerabilities


Compliance Auditor

Stewart Intersea Global Services
Lagos, Nigeria
02.2010 - 08.2017
  • Performed Sarbanes-Oxley (SOX) audit implementation with the team (We adopt the Risk control matrix in performing Walk-throughs, Test of Controls and Remediation) & SSAE16 Audits (Service Organization Controls) SOC Audit using COBIT framework
  • Tested and evaluated the design and operating effectiveness of CUECs as specified by Vendor in SOC Reports
  • Participated in all stages of audits including researching, planning, scheduling, collecting, sorting, and summarizing data, completion, and drafting audit reports
  • Performed audit of IT System & Infrastructure SAP, Windows, Mainframe, and Microsoft Dynamics, UNIX in various industries like Retail, Manufacturing and Financial Services
  • Performed assessments of IT internal controls as part of financial statement audit, Audit Readiness, Attestation Engagement and Operational audit
  • Worked in audit engagements (Planning, kick-off, walkthrough and exit meeting) coordinate PBC requests and report to Management
  • Assisted in the development of Annual audit objectives and creation of audit programs
  • Performed IT General Controls (Access Control, Change Management and IT Operations) and Application Controls supporting Financial Audit Team
  • Prepared Request for Proposal (RFP) in which it's indicated a planned approach in achieving deliverables
  • Performed Identification and assessment of IT risk areas and provides input to the development of the Annual Audit Plan
  • Analyze existing compliance records and making all necessary updates
  • Recommending and implementing changes to address procedures and practices that are not compliant with industry standards and regulations
  • Performed review of Contingency Plan (CP) & Annual Contingency Plan Test (CPT) either at a Tabletop exercise/DR site
  • Conducted peer review team member's works to correct or improve audit

Education

Diploma in Liquid Cargo Survey And Inspection - Cargo Inspection

Lloyds Maritime Academy
Ellesmere,United Kingdom
2013

Bachelor of Technology - Marine Engineering

Rivers State University of Science And Technology
Port Harcourt,Nigeria

Skills

  • Data Analysis
  • Industry Trend Analysis
  • Analytical Skill
  • Communication
  • Time Management
  • Team Work
  • Problem Solving
  • Spreadsheet Development
  • Recommendations for Action
  • Templates Management
  • Critical Thinking
  • Compiling Data
  • SAP

Certification

Certified Information System Auditor{Certified}

Certified in Risk and Information Systems Control{CRISC-in view}.

Timeline

SENIOR ANALYST-THIRD PARTY RISK

Bnp Paribas Bank
07.2020 - Current

IT INTERNAL AUDITOR

IMPACT ENCRYPT INC
12.2017 - 05.2020

Compliance Auditor

Stewart Intersea Global Services
02.2010 - 08.2017

Diploma in Liquid Cargo Survey And Inspection - Cargo Inspection

Lloyds Maritime Academy

Bachelor of Technology - Marine Engineering

Rivers State University of Science And Technology

Certified Information System Auditor{Certified}

Certified in Risk and Information Systems Control{CRISC-in view}.

DEJI ADEOSUN