Zacchaeus Amosu

About Zacchaeus Amosu

Hardworking, skillful, and successful IT Audit professional with years of experience in assessing system design and IT General Controls. Skilled in information security principles and compliance, internal controls, IT Risk management, IT General, and Application Control Testing. Work performed has included internal control testing (SOX), HIPAA Compliance reviews, walkthrough, audit readiness, follow-up, and test of controls. Seasoned with firsthand experience in implementing various functions in IT Audit Engagements, Information Security Risk Assessments and Project Management. ISACA Certified Information Systems Auditor (CISA). Experience managing multi-system application control and carrying out information systems security control assessment and testing using applicable frameworks like COSO, COBIT, ISO 27001 & 27002 standards.

Experience

1. IT Auditor

   Citi

   Nov 2020 — Present

   Prepare IT audit program to include access control, change management controls and application controls; and identify deficiencies in the design and operating effectiveness of control and provide recommendation.• Identified and communicated IT audit findings to senior management and clients.• Maintain good working relationship with the clients to enhance customers’ satisfaction and work with client management and staff at all levels to perform audit service.• Perform all stages of audit planning, fieldwork, executive, reporting and follow up.• Conduct testing of Sarbanes-Oxley (SOX), and Service Organization Control (SOC) SSAE 18 Review, using COBIT and COSO frameworks.• Conducts root cause analysis of vulnerabilities and coordinates with appropriate stakeholders to remediate findings on IT audit engagements within schedule and budget constraints. • Train junior auditors on auditing standards and provide them with technical audit training such as auditing Windows, auditing PeopleSoft, SAP and other audit concepts. • Participated in team kick-off meetings and drew up audit plans.• Review of IT General Controls (ITGC) and various applications, databases, operating systems, and network devices• Assisted in developing audit objectives and audit program steps to address process and financial risks, coordinated audit process, ensured work was assigned, completed timely, and work papers sufficiently supported identified risks.• Participates in the review and design of IT general controls testing for Sarbanes-Oxley 404 compliance. • Perform walkthroughs and performing testing to assess design and operating effectiveness of controls for ITGCs and business process cycles. • Conduct assessment of disaster recovery plans and business continuity plans. Assist with application security reviews for separation of duties and compliance with business rules.

Education

• Yaba College of Technology, Yaba, Lagos

  Bachelor of Science - BS

  2009 — 2013