Ubong Ekpo

IT Audit Associate, Citizen Services Accounting Group (July 2023 – Present)

• Conduct IT audit support for the Securities Exchange Commission (SEC) and assist with OIG, FISMA, A-123, and GAO audits.
• Assess and document internal controls, cybersecurity risks, and IT compliance in accordance with NIST frameworks.
• Prepare audit documentation, analyze POCs and PBCs, and ensure timely audit execution.
• Prepared working papers, reports and supporting documentation for audit findings.
• Prepared comprehensive audit reports, detailing findings and presenting recommendations for improvement.

• Conducted internal IT audits and compliance reviews, focusing on risk-based assessments, IT general controls (ITGCs), and cybersecurity frameworks.
• Assisted government agencies in improving governance, risk management, and compliance (GRC).
• Led execution of audit programs in accordance with FISMA, COBIT, and OMB Circular A-123.
• Streamlined operational efficiency by identifying areas for improvement and proposing actionable solutions.
• Effectively managed multiple competing priorities while maintaining focus on delivering exceptional results for clients and the organization.

• Executed risk management and IT audit programs, assessing access controls, configuration management, and change management.
• Performed walk-throughs and control testing to ensure compliance with federal and commercial IT security standards.
• Utilized Archer GRC for audit documentation and compliance tracking.
• Evaluated internal control systems for effectiveness, recommending improvements as necessary.
• Advised clients on strategies for mitigating risks associated with regulatory requirements and changes in legislation.

• Led IT risk assessments and conducted ITGC testing for critical business processes.
• Evaluated entity-level controls and business process risks to enhance security compliance.
• Assisted in financial statement audits, testing automated controls and segregation of duties.
• Enhanced IT security by conducting comprehensive audits and identifying potential risks within the organization.
• Provided expert advice on regulatory compliance matters, supporting the organization in achieving and maintaining required certifications and standards.