John Nlemedim

About John Nlemedim

To work with various professionals worldwide and broaden my worldview in a professionally challenging environment. I would like to develop my personal skills, most specifically pushing myself to think out of the box, pushing my interpersonal skills to the limit while constantly adapting to new environments. To stand out in the best possible ways, provide resourceful contributions in the field maintain and uphold professional ethics.

Experience

1. Senior Grc Analyst & IT Auditor at Deloitte

   Deloitte

   Jan 2022 — Present

   Conducted ITGC & Application testing, SOX, SOC, and internal audits to assess the effectiveness of IT controls and compliance with regulatory requirements.• Executed end-to-end IT audits, ensuring compliance with industry standards, regulatory requirements, and internal policies.• Conducted thorough assessments of IT infrastructure, applications, and systems to identify vulnerabilities and control weaknesses.• Experienced in evaluating and enhancing controls related to SOX, HIPAA, HITRUST, GRC, PCI/DSS, SOC, NIST, and ISO Provided strategic recommendations to strengthen IT governance, risk management, and compliance frameworks.• Collaborated with cross-functional teams to implement corrective actions and monitor the progress of remediation plans.• Perform vendor risk assessments and due diligence to ensure third-party compliance and data protection.• Conducted ITGC audits to assess logical access controls, change management processes, and system development life cycle (SDLC) practices.• Acted as a subject matter expert, providing guidance and training to IT and non-IT personnel on compliance best practices.• Evaluated IT general controls, including logical access, change management, backup and recovery, and data centre operations.• Performed application controls testing to assess the reliability and integrity of financial reporting systems.• Developed risk-based audit programs, including test plans, to ensure comprehensive coverage of key IT processes and controls.• Identified control deficiencies, process gaps, and recommended control enhancements to mitigate risks and improve operational efficiencies.• Collaborated with process owners and stakeholders to develop action plans and track the implementation of control remediation measures.• Experienced with COSO, FISCAM, PCIDSS, HIPAA, ISO FISMA, NIST SP 800-53 Rev 4 series or other risk control frameworks.

Education

• Imo State University

  B.Sc