Bisi Obafemi, CISA

 Perform assessment of IT internal controls as part of financial statement audits, Internal and Operational audits, Attestation engagement, and Audit readiness.  Document control weaknesses and related testing exceptions including relevant controls in Enterprise Resources Planning (SAP, Oracle Financial and PeopleSoft) business processes.  Identified and communicated IT audit findings to client Management.  Perform all stages of audit, including planning; fieldwork/execution; reporting; and follow-up. Perform IT auditing with an emphasis on commercial public companies using ITGC, Application Controls, PCI DSS, COBIT(SOX), COSO, ISO 27001, and SOC I, SOC II attestation engagements.  Perform PCI audit and HIPAA audits for commercial companies and healthcare providers.  Conduct root cause analysis of vulnerabilities and coordinates with appropriate stakeholders to remediate findings on IT audit engagements within schedule and budget constraints.  Lead IT Implementation and testing of internal controls over financial reporting: Sarbanes Oxley Act (SOX),  Perform Walkthroughs of controls and evaluates operating effectiveness of controls.  Perform audit of IT general controls such as access control, change management, IT Operations, Disaster recovery, and platform reviews (Windows).  Perform SSAE 18 (SAS 70) SOC 1 Type 2 report reviews for organizations within Insurance, Health, Financial Services, and other industries.  Research and identify control issues and recommend strengthening controls to the client.  Complete and review SOX testing for key General IT Controls (GITCs/ITGCs), IT application controls (ITACs), and key reports (IPE) identified in the walkthrough process.  Coordinate testing approach and align expectations with external auditors.  Prepare compliance reports and audits, providing evidence of compliance with security standards and regulations.  Collaborate with cross-functional teams to identify and remediate security vulnerabilities.

 Evaluated IT and business processes for effectiveness and efficiency by understanding and documenting key business processes and internal controls.  Performed periodic reviews of process controls and technical controls to ensure continuous adherence to SOX compliance.  Reviewed internal policies and procedures and existing laws, rules, and regulations to determine applicable compliance and the adequacy of underlying internal controls.  Performed IT general controls such as access control, change management, IT Operations, disaster recovery, and platform reviews (Windows and UNIX OS).  Identified risks associated with IT infrastructure, operations, and applications including pre/post-implementation audit reviews for ongoing IT projects along with current legacy applications  Liaised between in-house managers/IT department and External Financial and Operational Auditors.  Performed assessment of IT internal controls as part of financial statement audits, Internal and operational audits, Attestation engagement, and Audit readiness.  Conducted testing of Sarbanes-Oxley (SOX), OMB Circular A-123 Audit, and Service Organization Control (SOC) SSAE 1 Review, using COBIT.  Reviewed General Controls (ITGC) and various applications, databases, and operating systems.  Identified risks associated with IT infrastructure, operations and applications including pre/post-implementation audit reviews for ongoing IT projects along with current legacy applications  Liaised between in-house managers/IT department and External Financial and Operational Auditors  Prepared audit scopes, reported findings and presented recommendations for improving data integrity and operations  Communicates with the company's external auditors on general computer control related matters and SOX test procedures.

 Examined and evaluated the effectiveness and adequacy of the internal control systems.  Performed a review of the effectiveness and application of risk assessment methods, and risk management procedures.  Reviewed financial and management information systems, including electronic banking services and IT information system.  Reviewed financial reports and accounting records for accuracy and reliability.  Performed a review of the system applied by the bank in evaluating its capital with respect to estimated risk.  Performed tests on the functioning of specific internal control procedures and transactions.  Evaluated and reviewed established systems for ensuring codes of conduct, compliance with regulatory and legal requirements, and the implementation of procedures and policies.  Served as Team Lead for the auditors responsible for special investigations and carrying out tests on the timeliness and reliability of the regulatory reporting.  Prepared and presented audit reports to Chief Internal Auditor/ Management.  Conducted interviews with associates responsible for tasks, approvals, and processes related to policies and SOPs under review. Prepared and presented audit reports to Chief Internal Auditor/ Management

 Developed and coordinated, control programs to ensure compliance with all applicable federal and state banking laws, regulations, and rules.  Performed financial and operational controls as required, and supports internal audit teams as needed  Performed risk assessment.  Developed/reviewed internal control, tests, plans, and performs testing across all business units to evaluate their operating effectiveness in accordance with established procedures, and reports test results.  Presented control findings, reports to Head Internal Control, and tracks issues to ensure proper remediation or mitigation in a timely manner.  Worked collaboratively and effectively with other Compliance team members by assisting in other internal control and compliance processes.  Served as Team Lead for review of branch Internal Controls & procedures, plan internal audit engagement strategy, define objectives, and address related internal controls risks and issues.  Confirmed branch compliance with AML/KYC policies and procedures in line with BOFIA.  Planned, scheduled, coordinated, and carried out in-house compliance training program  Maintained a compliance library to ensure bank personnel has the proper resources available to keep up with regulatory requirements.