Nana Yeboah

F

IT Senior Auditor

First Financial Bank

Apr 2023 - Jan 2024 (10 months)

• Performed security assessments and risk advisory services based on the client's business objectives and according to contracts. • Assesses the ITGCs using best practices and audit guidelines in compliance with NIST800-53, COSO, and COBIT standards. • Evaluate the organization's project management policies and practices. • Utilized company's Active Directory to ensure process access request. • Performed daily monitoring for appropriate access controls, verified integrity and availability of all hardware, server resources, systems, and key processes. • Utilize data analytics tools to streamline audit processes. • Communicated with IT and Business Management on issues remediation, process, and control improvements. • Conduct audit f

D

Lead Tech Risk Consultant

Department of Homeland Security, Office of Inspector General

Aug 2022 - Jan 2023 (6 months)

• Lead weekly corporate communications between stakeholders, key partners and support team to gather facts and information on workflow (i.e which controls can be assessed depending on remediation status.) • Performed integrated audits requiring technical skills for evaluating network and application development and compliance with corporate security policies from planning phase to completion, also used OMB Circular A-123, FISCAM in performing audits. • Provided scheduling support by scheduling meetings/appointments, writing/drafting/distributing meeting minutes and agenda, following up on action items, using MS Office Suits • Performed and tested ITGC and Application Controls using FISCAM, SSAE 18, and NIST 800-53r4 • Engaged with the

P

Lead Auditor

PwC

Oct 2021 - Jul 2022 (10 months)

• Assisted with walkthroughs and held meetings with clients to discuss scope of engagement . • Gathered RFI's to conduct quality auditing. • Prepared and completed EGA's per assigned systems. • Work with the IT management team to evaluate controls, perform assessments, monitor regulations, and ensure company compliance. • Addressed gaps and non-compliance for multiple projects by analyzing data security controls to identify weaknesses and design strategies • Create pivot tables to support data analysis • Used ServiceNow to pull evidence needed for specific control • Reviewed ITGC testing conducted by offshore team

C

Associate Auditor

ClickHouse Consulting

Jan 2018 - May 2021 (3 years 5 months)

• Performed and tested ITGC and Application Controls using COSO, FISCAM, HIPAA, SSAE 18, and NIST 800-53r4. • Perform audits on UNIX, Windows, Mainframe, other IT Infrastructures and Disaster Recovery. • Managed the PBC's and PBC List for the audit team. • Assisted in Developing audit plans and programs to evaluate control areas on projects such as financial statement audit, SOX testing, SOC, COBIT, and FISCAM. • Tested ITGC (Access, Change Management, Contingency Planning) controls and Application controls using FISCAM framework. • Worked with the engagement team to identify and resolve client issues discovered during the Audit and Review Process. • Maintain a good working relationship with clients to enhance customer satisfaction

S

Staff

About

Detail

Timeline

Résumé