Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

Yemi Oyolola

Dallas,TX

Summary

Experienced professional with over 6 years of experience in multiple areas of Business Risk, Compliance, and IT Audit. Adept at identifying, evaluating, and mitigating operational risks across diverse financial/IT services environments. Proficient in developing and implementing risk management frameworks, performing thorough risk assessments, and ensuring compliance with regulatory requirements. Demonstrates strong analytical skills, attention to detail, and the ability to lead cross-functional teams.

Overview

10
10
years of professional experience
1
1
Certification

Work History

IT SOX Audit Lead

LANOS LLC
01.2023 - Current
  • Oversee the annual SOX compliance process including scoping, risk assessment, control design, and testing
  • Lead and perform extensive IT SOX reviews of business processes to ensure appropriate controls and procedures are in place and operating effectively
  • Work with external auditors and coordinate SOX efforts between the SOX department, SOX stakeholders and external audit
  • Support the execution and implementation of the IT SOX programs with an eye for process improvement
  • Develop and maintain SOX documentation such as risk and control matrices, process flowcharts and test plans
  • Perform testing of IT general controls (ITGC) and application controls (ITACs) to assess their design and operating effectiveness
  • Identify control deficiencies, recommend corrective actions and monitor remediation efforts
  • Provide guidance and support to team members in performing audits and assessments

Lead Business Execution Consultant (Contractor)

CENTER FOR DISEASE CONTROL AND PREVENTION
12.2020 - 12.2022
  • Completed Annual Risk and Control Self-Assessment (RCSA) refresh activities to provide SME support to maximize effectiveness
  • Participated in identifying, assessing, managing, and mitigating current and emerging risk exposures within the Control Management functional areas
  • Coordinated RCSA evaluations of risks and controls and facilitated working sessions with business owners
  • Supported the development of working templates, key documentation, playbooks, and engagement models
  • Managed agenda, timelines, meetings, share and apply lessons learned
  • Managed timely QA/QC submissions, handoffs, support feedback implementation and disposition feedback
  • Supported Annual re-fresh schedule and roster management, status reporting, level of effort monitoring and R&CB scheduling
  • Pre - populated and mad live edits in Risk Control Self-Assessment (RCSA) Workshop Tool/ServiceNow based on refresh discussions

Lead IT Auditor/Risk Compliance (Remote)

UNIVERSITY OF TEXAS RIO GRANDE VALLEY PUBLIC HEALTH OFFICE
09.2020 - 09.2022
  • Led teams and provided hands on assistance for all aspects of both IT and Financial Internal Audit engagements including risk assessments, process documentation, and testing of internal controls
  • Evaluated processes to determine adequacy of controls (application and financial controls), compliance with policies and procedures, and opportunities for automation of testing
  • Performed specific audit procedures, tests, and analysis, including those that related to Sarbanes- Oxley compliance using automated tools
  • Executed audit documentation techniques including key risks and controls alignment to audit test objectives and conclusions
  • Provided assistance to external auditors and regulators in the execution of their duties where required
  • Led the follow up process to facilitate the documentation and resolution of audit issues and ensure process and control improvements have been timely implemented

Lead IT Compliance Specialist

CITY OF DALLAS
08.2019 - 08.2020
  • Spearheaded the development and implementation of the company's compliance program, focusing on
  • Conducted comprehensive risk assessments to identify potential compliance risks and implement mitigation strategies
  • Oversaw compliance audits and internal reviews to ensure adherence to regulatory standards and company policies
  • Designed and delivered compliance training programs for employees at all levels to promote a culture of compliance and ethical conduct
  • Collaborated with senior management and legal teams to address and resolve compliance issues and implement corrective actions
  • Led a team of compliance professionals, providing guidance and support to ensure effective compliance management
  • Monitored regulatory changes and updated compliance programs and policies accordingly
  • Prepared and submitted regulatory reports to ensure timely and accurate compliance with reporting requirements
  • Participated in internal investigations and prepared reports on compliance issues and findings
  • Monitored and reported on compliance activities, ensuring alignment with regulatory requirements
  • Assisted in the assessment of technology-related compliance issues including information security, identity management, user access, and data integrity
  • Prepared compliance reports, identified issues and report to the department

Lead IT Auditor & Compliance Specialist-Parks Department

CITY OF LEWISVILLE
06.2018 - 06.2019
  • Led teams and provided hands on assistance for all aspects of both IT and Financial Internal Audit engagements including risk assessments, process documentation, and testing of internal controls
  • Assisted with project management for several IT technical daily operations and audits in parks
  • Evaluated processes to determine adequacy of controls (application and financial controls), compliance with policies and procedures, and opportunities for automation of testing
  • Performed specific audit procedures, tests, and analysis, including those that support regarding Sarbanes- Oxley compliance using automated tools
  • Executed audit documentation techniques including key risks and controls alignment to audit test objectives and conclusions
  • Provided assistance to external auditors and regulators in the execution of their duties where required
  • Led the follow up process to facilitate the documentation and resolution of audit issues and ensure process and control improvements have been timely implemented
  • Proactively identified audit and compliance access related issues to reduce the risk of security exposures on the support systems and worked with various teams to implement the improvement
  • Documented access management procedures for assigned applications and/or platforms and kept all access

IT Auditor- Resource Development

UNITED WAY OF DENTON COUNTY
10.2017 - 05.2018
  • Assisted in the development and implementation of thorough and comprehensive Quality Control/Assurance procedures, to ensure that the team meets and exceeds all the expectations of the client
  • Performed assessments of IT internal controls as part of financial statement audit, Internal and operational audits, Attestation engagement, and Audit readiness
  • Led and championed agile stand-ups meetings weekly, to ensure all deliverables are achieved
  • Implemented risk assessment to support internal audit department management in creating risk-based audit plans
  • Evaluated IT general controls (ITGC) including information security, change management, data center and physical security; disaster recovery and systems development life cycle (SDLC)
  • Conducted and supervised end to end IT audit process including engagement planning, coordination, scope determination, risk and control identification, design of audit program, procedures, test control and evaluate results
  • Performed IT General and Application controls testing and walkthroughs as well as functional Segregation of Duties Review for applications supporting business processes and systems to ensure security risks are appropriately addressed by implemented controls
  • Worked both independently and across teams to collect evidence to facilitate IT SOX testing
  • Improved performance management and increased employee engagement by standardizing system across departments

IT Auditor I - Health Team

WORKHEALTH OCCUPATIONAL MEDICINE CLINIC
01.2015 - 08.2017
  • Provided policy risk oversight, project risk oversight, change risk oversight, and compliance management
  • Conducted walkthroughs, developed test plans, testing procedures and documents test results, and exceptions
  • Conducted the review of computer operations, data integrity testing, segregation of duties, access control, audit log, enabled services, remote access control, application-level security, and environmental control around the data centers
  • Conducted IT risk assessment; document related risks and note key control issues; develop appropriate audit centers programs to test the control risks identified and subsequently evaluate control designs, optimization, and assurance over operational and compliance processes
  • Implemented reviews on IT business operation, infrastructural security, data migration process, business integration and process integrity
  • Conducted risk evaluation by examining related risk, key controls and developing appropriate audit measures to test control identified
  • Involved in carrying out risk assessment and evaluation for the organization and recommend possible solution to any findings
  • Conducted audit interviews and assignments, reviewed work papers and reports, documented, and analyzed audit evidence
  • Assisted in the execution of the annual internal audit plan as directed and prepared reports to communicate audit results to management and made recommendations as appropriate
  • Performed and documented audit activities in accordance with professional standards such as COBIT and COSO framework
  • Reviewed medical records to help inform decisions and gather information for audits involving health conditions in the company database for patients

Education

Master of Science - Health Sciences

TEXAS WOMAN'S UNIVERSITY
Denton, Texas

Bachelor of Arts - Psychology

FLORIDA INTERNATIONAL UNIVERSITY
Miami, Florida

Skills

  • SAP SQL Database FFIEC ISO 27000 27001 27002 NIST Metric stream Rally UNIX NetSuite Windows Server IDEA ISOX ISAE Oracle Database GRC Archer SOC 1 SOC 2 SOC 123 Aurora Peoplesoft LINUX Network Systems Cybersecurity Azure Microsoft office suite (Word, PowerPoint, Visio, Excel) Data analytics HIPPA GBLA AML BSA ADA Reg B Reg D FCPA SCRA UDAAP FedRAMP OFAC PCI Oracle database Agile methodology COBIT Share point-based system Service Now Audit board, Use of automated scripts Teammate Audit command language (ACL)
  • Internal controls
  • Audit planning
  • Data analytics
  • Coaching and mentoring
  • Strategic thinking
  • Ethical standards
  • Confidentiality
  • Risk assessment
  • Risk management
  • Regulatory compliance
  • Retirement system management
  • Risk assessment expertise
  • Internal audit administration
  • Continuous improvement

Certification

CompTIA Security+ CE- Candidate ID: COMP001022300846

Timeline

IT SOX Audit Lead

LANOS LLC
01.2023 - Current

Lead Business Execution Consultant (Contractor)

CENTER FOR DISEASE CONTROL AND PREVENTION
12.2020 - 12.2022

Lead IT Auditor/Risk Compliance (Remote)

UNIVERSITY OF TEXAS RIO GRANDE VALLEY PUBLIC HEALTH OFFICE
09.2020 - 09.2022

Lead IT Compliance Specialist

CITY OF DALLAS
08.2019 - 08.2020

Lead IT Auditor & Compliance Specialist-Parks Department

CITY OF LEWISVILLE
06.2018 - 06.2019

IT Auditor- Resource Development

UNITED WAY OF DENTON COUNTY
10.2017 - 05.2018

IT Auditor I - Health Team

WORKHEALTH OCCUPATIONAL MEDICINE CLINIC
01.2015 - 08.2017

Master of Science - Health Sciences

TEXAS WOMAN'S UNIVERSITY

Bachelor of Arts - Psychology

FLORIDA INTERNATIONAL UNIVERSITY
Yemi Oyolola