Summary
Overview
Work History
Education
Skills
Certification
Interests
Timeline
Generic
ASUQUO EMMANUEL

ASUQUO EMMANUEL

INFORMATION SYSTEMS AUDITOR
IKEJA,Lagos.

Summary

I am a risk, security and auditing professional who is interested in applying my skills tohelp organizations meet business objectives. I am highly motivated and armed with an understanding of regulations and their applicability to domestic and international markets. I have knowledge of COBIT 5, COSO, NIST 800 -53, ISO 27000s and ISO 30000s series frameworksand how these applytowards information security management, auditing, mitigating risk and ensuring compliance in organizations.

Overview

6
6
years of professional experience
3
3
Certification

Work History

Information System Auditor

Access Holdings Microfinance
07.2021 - Current
  • Audited Access Bank Madagascar, AB Bank Rwanda, Access Microfinance Bank
  • Tanzania, Access Bank Liberia, AB Microfinance Bank Nigeria, VITAS Palestine and Acces
  • Banque Madagascar as part of a team of auditors and proffered recommendations which helped improve the banks’ COBIT ratings and overall IT service delivery by factors ranging between 50% and 70% in each bank
  • Performs general and application control reviews for simple to complex computer information systems to ensure security requirements are met
  • Performs information control reviews to include system development standards, operating procedures, system security, programming controls, communication controls, backup and disaster recovery, and system maintenance
  • Performs reviews of internal control procedures and security for systems under development and/or enhancements to current systems to ensure secure development
  • Prepares audit finding memoranda and working papers to ensure that adequate documentation exists to support the completed audit and conclusions
  • Prepares and presents written and oral reports and other technical information in a pertinent, concise, and accurate manner for audit seniors to review
  • Ensures that IT Security Standards for security assessments and validation in the processes of database design, servers, desktop, network, application development are adopted.

Information System Auditor

Port Harcourt Electricity Distribution Company, PHEDC
07.2020 - 07.2021
  • Recommended controls that ledto increment in productivity in the company’s central application by 50%
  • Analyzed system downtime and gave recommendations which reduced downtime by 70%
  • Reviewed system design to ensure that system is constantly confidential, has integrity and is available
  • Conducted general application control reviews for five (5) Information Systems applications
  • Reviewed the Software Development Lifecycle process to ensure that Dev- Sec- Ops procedures were duly followed
  • Monitored UATs of 3 applications and recommended controls which mitigated risks discovered
  • Performed reviews of internal control procedures for applications and reviewed integration controls of cloud platforms with on premise infrastructure
  • Recommended controls that improved billing efficiency by 13%
  • Acted as a control person for monthly payroll procedures and ensured that payments were reasonably accurate
  • Conducted a full information security management audit as part of an audit team and discovered 10 high risk business processes and equipment and recommended controls which mitigated the risks 3

Freelancing and Application Development Consultant

Ahead Resources
03.2017 - 07.2020
  • Constructed a simple calculator application
  • Designed a simple notification alarm
  • Worked as part of a development team to design and maintain a website for customers
  • Designed a simple application to implement shared preferences

Education

Masters - Financial Engineering

Worldquant University
2023

Bachelor of Engineering - Electrical/Electronic Engineering

Cross River State University of Technology
March 2017

Skills

  • Hard skills
  • Advanced knowledge of the Use of IT Vulnerability assessment using tools such as
  • Nmap/zenmap, owasp zap, lighthouse to test for system vulnerabilities and recommend
  • Solutions for the mitigation
  • Intermediate knowledge of the use of penetration testing tools such as kali linux and burpsuite
  • IT Audit, ITGC, Knowledge of Application controls, Review of new technologies,
  • Definition of security configuration, response to and resolution of security incidents, and
  • Communication of information technology security risk
  • Soft Skills
  • High ethical standards with integrity, Effective communication and active listening, Team spirit,
  • Ability to work under pressure, Resourcefulness and inter personal skills, Ability to work with
  • Little or no supervision, Good organizational and time management skills, Confidence and
  • Motivation, Critical thinking and Business communication and presentation skills
  • Complex Problem-Solving
  • Compliance Requirements
  • Strategic Execution
  • Information Systems Examination

Certification

Certified Information Systems Auditor October 2022 Amazon Web Services Certified Cloud Practitioner January 2022 IBM Cyber-security Analyst October2021

Interests

Playing Chess, bug bounty and watching football

Timeline

Information System Auditor

Access Holdings Microfinance
07.2021 - Current

Information System Auditor

Port Harcourt Electricity Distribution Company, PHEDC
07.2020 - 07.2021

Freelancing and Application Development Consultant

Ahead Resources
03.2017 - 07.2020

Masters - Financial Engineering

Worldquant University

Bachelor of Engineering - Electrical/Electronic Engineering

Cross River State University of Technology
ASUQUO EMMANUELINFORMATION SYSTEMS AUDITOR