John Omotoso

Information Security Auditor @Sprintcue Ltd

GB

Supported controls catalogue program where I ensured appropriate and accurate population and validation of data in Archer (GRC tool) Reviewed IT control elements to mitigate IT risks regarding the confidentiality, integrity, and the availability of business information. Performing gap assessments to assess deficiencies and leveraging the assessment to improve ISMS and obtain ISO certifications. Recommended solutions to audit findings and collaborated with control operators across business functions to remediate findings. Reviewed, and updated the Information Security Policy in accordance with relevant frameworks NIST CSF, CIS, COBIT and ISO 27001. Managed IS Risk Management Program (ISRMP) and evaluated suitable GRC tool to support Information Security Risk Management process. Analyzing system security posture, policies, and documents determined NIST SP 800-37 compliance, CIS CSC, and developing an overall security compliance framework. Led IT General controls (ITGC) testing and SOX ITGC review covering access to programs and data and computer operations, and IT application controls (ITAC) review covering controls on system access, system configuration and interface controls

Dataleum

Data Analytics and Business Intelligence

University of Hull

Master of Science - MS, Artificial Intelligence and Data Science

University of Ibadan

Bachelor of Education - BEd, Human Kinetics