Jules Mulowayi

About Jules Mulowayi

GRC / IT risk professional and CISA with experience performing IT controls testing…

Experience

1. Associate Director Information Security Risk Specialist

   UBS

   Nov 2023 — Present · Raleigh-Durham-Chapel Hill, NC, US

   Conducted IT controls risk assessments that included reviewing organizational policies, standards, procedures and guidelines.• Conducted Security Control Assessment to assess the adequacy of management, operational privacy, and technical security controls implemented. A Security Assessment Report (SAR) was developed detailing the results of the assessment along with Plan of Action and Milestones (POA & M) to the Designated Approving Authority (DAA) to obtain the Authority to Operate (ATO).• Conducted Business Impact Analyst (BIA) to identify high risk area where audit effort will be allocated to.• Conducted meetings with IT client team, vendors and stakeholders to gather evidence, developed test plans, testing procedures and documented gaps, test results, and exceptions.• Developed a security baseline controls and test plan that was used to assess implemented security controls.• Developed and conducted ST & E (Security Test and Evaluation) according to NIST SP 800-53A.• Performed Certification and Accreditation documents in compliance with FISMA/NIST and SOX 404 standards.• Initiated and lead information security awareness and training programs.• Performed IT operating effectiveness test in the areas of security, operations, change management, and email authentication.• Review control test results for the IB COO as well as review control attributes to make sure they in line with the company\'s control framework guideline.• Review and give either approval or denial for false positive exceptions and exceptions related to dual on-boarded clients based on the BigID scanning report.

Education

• University of Kinshasa (Congo DR)

  Bachelor's degree, Computer Science