Seun Sotonade

• Oversaw implementation of SOX IT general controls compliance programs, ensuring preparedness for both internal and external audits.
• Ensured adherence to SOX ITGC compliance standards across more than twenty systems, enhancing access management, change management, and IT operations controls for six client engagements annually.
• Facilitated discussions with IT and business stakeholders to outline SOX control requirements and audit expectations, resulting in a significant decrease in external auditor inquiries.
• Analyzed eight new applications entering SOX environment to confirm that essential controls were effectively established and operational ahead of launch.
• Conducted comprehensive control walkthroughs with process owners to ensure effective validation of control design related to access provisioning change approvals and operational monitoring.
• Executed meticulous preparation and organization of over one hundred audit workpapers and evidence packages, ensuring compliance with audit standards.
• Identified control deficiencies and collaborated with control owners to establish and monitor remediation plans until resolution.
• Analyzed management remediation responses and monitored implementation of corrective actions to facilitate prompt resolution of identified issues.
• Analyzed and refined control documentation and compliance frameworks, resulting in a decrease of repeat findings during audit cycles.

• Tested IT General Controls across applications, databases, and infrastructure environments to evaluate design adequacy and operating effectiveness.
• Conducted IT risk assessments across access management, change management, and IT operations processes and identified multiple control deficiencies with remediation recommendations.
• Evaluated technology risks associated with new system implementations and upgrades and confirmed control readiness prior to deployment.
• Documented compensating controls where gaps were identified and mapped remediation strategies to SOX and COSO framework requirements.
• Maintained an inventory of more than seventy five IT controls and ensured documentation remained current and audit ready.
• Performed walkthrough with control owners to understand processes, collect evidence, and prepare workpapers used by external auditors.
• Supported audit planning activities including ITGC scoping, risk ranking, and control mapping across multiple client engagements.
• Reviewed SOC 1 and SOC 2 reports for third party vendors and identified complementary user entity controls required within client environments.

• Reviewed and challenged front line operational risk program execution with focus on external fraud, logical and physical security, transaction processing and execution.
• Utilized subject matter expertise and industry knowledge to provide independent oversight and credible challenge to the business’s operational risk management activities.
• Performed analysis on extremely complex business systems to determine risks and impact.
• Assisted project teams to evaluate IT Risk and compliance consideration for projects.
• Managed daily operational processes and drove business improvements, ensuring commercial and best practice objectives were met.
• Identified control gaps and potential remediation steps; lead and/or assist process re-design and coordination of remediation efforts.
• Assisted with IT-related aspects of vendor risk management program functions such as risk assessments, due diligence documentation reviews, control testing, contract reviews.
• Continuously monitor control compliance and prevalent risk environment to ensure that exposures are kept at acceptable levels.
• Conducted comprehensive IT audits to evaluate system integrity and compliance with regulatory standards.
• Developed audit plans and strategies to enhance operational efficiency across IT processes.
• Collaborated with cross-functional teams to identify and mitigate risks within technology systems.
• Led training sessions for junior auditors, fostering knowledge sharing and skill development in auditing techniques.
• Implemented process improvements based on audit results, enhancing overall effectiveness of IT controls.
• Prepared detailed reports outlining audit findings, recommendations, and actionable insights for management review.