Bernedette Etafo

Experience

1. Senior Information Technology Auditor

   Capital One

   Mar 2022 — Present

   Supporting IT teams with updating management action plans and monitoring/reviewing remediation evidence through to resolution.* Developed an internal document of Privacy Requirements Matrix as an outline of the laws and regulations and their requirements used to build the Audit Program and Test Plan.* Documents Control testing and associated findings into Archer GRC tool (Archer)* Executing and Documenting testing performed over identified controls in accordance with institute of internal Auditors and internal Risk review group standards * Document and communicate audit findings with the internal risk review group and line of business personnel.* Liaised with IT & Business Management on issues remediation, process, and control improvements and work with the audit project team to achieve departmental goals and ensure awareness of changes in business activities and objectives.* Reviewing Enterprise Encryption Management tools and ensuring that security and technology standards exist to govern the protection of data via encryption * Ensuring that RCSA findings are documented in GRC and management has formally assessed whether the finding will be remediated or risk accepted.* Ensuring that a documented access provisioning process exists including appropriate access with segregation of duties within the technology environment.

Education

• Imo State University

  Bachelor's degree, Insurance and Actuarial Science

  2006 — 2010