Ibrahim Yakub

IT Sox Compliance Analyst @Nabtech Limited

GB

Executed IT Internal Audit engagements, as assigned, supported external SOX audit and other relevant attestation programs, and communicated audit findings and opportunities for improvement to control operators and senior management- Reviewed the IT policies and procedures against the provision of COBIT 5 frameworks to ascertain governance and management of IT within the organization. Also benchmarked Information Security policies against ISO 27001 for adequacy- Supported audit of internal IT controls reviews, and provided guidance to control owners on the objectives, and expectations for key controls. Along with vendor risk management and third-party risk management process through a review of SOC 2 reports and related vendor controls- Documented procedures for reviewing IT General Controls (ITGCs), Entity Level Controls (ELCs), and IT Application Controls (ITACs)- Tested IT Internal controls and IT-dependent management controls to ascertain design efficiency and operating effectiveness, and improved audit strategies, including the use of data analytics tools such as Alteryx for Journal Entry (JE) testing- Communicated controls testing results and inadequacies, and recommendations in a clear and concise manner to appropriate levels of IT management, including activity updates to the Board Audit Committee- Supported lead auditors during IT audit reviews to identify risks and WCGWs, test IT Application Controls and ITGCs, and evaluate the operating effectiveness of controls implemented within the IT control environment.