Summary
Overview
Work History
Education
Skills
Certification
References
Timeline
Hi, I’m

Eric Osei-Bonsu

Olathe,KS

Summary

High analytical and detail-oriented Compliance Auditor with 5+ years of experience in auditing, managing, and protecting Information Systems through Information Assurance. Demonstrated proficiency in risk assessment, regulatory compliance, and enhancing internal controls, using standards and frameworks such as NIST, ISO 27000, SOC, and SOX. Proven ability to identify and mitigate compliance risk effectively. Effective communication skills to convey complex compliance issues to all levels of stakeholders. I aspired to ensure compliance with industry standards and regulations to safeguard organizational integrity.

Overview

6
years of professional experience
1
Certification

Work History

Guild Education

Information Security Auditor
11.2021 - 05.2024

Job overview

  • Successfully achieved SOC1 and SOC2 compliance by collaborating with stakeholders and external auditors
  • Implemented GRC controls modules to help with user access monitoring and change management reviews, enhancing compliance efforts
  • Led comprehensive audits ensuring adherence to internal policies and external regulations
  • Enhanced internal controls and addresses security risks through collaboration with departments
  • Presented detailed audit reports to senior management, driving proactive decision-making
  • Ensured policy compliance by conducting User Access Reviews, testing for SOX readiness, and maintaining Policy Acknowledgement report up-to-date.

Garmin International PLC

IT Security Analyst
09.2018 - 11.2021

Job overview

  • Conducted risk-based audits to assess internal control effectiveness, improving compliance measures
  • Contributed to the development of audit plans and programs, enhancing audit efficiency
  • Evaluated security controls based on NIST SP 800-53A, ISO 27001/2, and organization-defined monitoring strategy, ensuring alignment with industry standards
  • Effectively communicated audit findings and recommendations to management, fostering proactive decision-making
  • Monitored compliance actions to address findings promptly, ensuring regulatory adherence
  • Maintained updated knowledge of industry regulations, enhancing organizational compliance posture.

Accenture Federal Services

Compliance Risk Analyst
04.2018 - 09.2019

Job overview

  • Assisted in the execution of audit procedures
  • Supported senior auditors in preparing audit reports
  • Participated in client meetings and discussions.

Education

Johnson County Community College
Overland Park, KS

Pre-Pharmacy

London Guildhall University/City of London University

BA in Business Studies

SmartThink LLC
Berwyn Heights, MD

Cybersecurity Bootcamp

Skills

  • Advanced knowledge of Microsoft Office suite, (Word, Excel, Outlook, Power Point)
  • Experience with using both Windows, Mac OS
  • Familiar with the Cloud infrastructure
  • Knowledgeable in using Google Drive
  • Proficiency in General Risk Control (GRC) tool, Hyperproof
  • Ability to work independently and part of a team
  • Detail-oriented and highly organized
  • Excellent written and verbal communication
  • Strong analytical and problem-solving abilities

Certification

  • CompTIA Security+ Certified
  • Certified Information System Auditor (CISA)

References

Available upon request.

Timeline

Information Security Auditor

Guild Education
11.2021 - 05.2024

IT Security Analyst

Garmin International PLC
09.2018 - 11.2021

Compliance Risk Analyst

Accenture Federal Services
04.2018 - 09.2019

Johnson County Community College

Pre-Pharmacy

London Guildhall University/City of London University

BA in Business Studies

SmartThink LLC

Cybersecurity Bootcamp
Eric Osei-Bonsu