RASAK ABDULSALAM
St louis
Summary
Professional Summary Experienced and dedicated professional seeking a challenging role in Internal Audit to contribute to the organization's success through risk-based assurance and advisory services. Committed to upholding industry standards and driving meaningful dialogue with stakeholders. 8+ years of IT Audit, Cybersecurity, or related experience in similar fields (Computer Science, Informatics, IT or Cybersecurity Governance, Risk, and Compliance, etc.) Excellent understanding of business and IT processes. - Demonstrated expertise in executing audits of systems and processes, both U.S. and international. Experienced in executing IT audits in a large and complex IT & business environment. Able to evaluate and communicate control results, best practices, and risks to stakeholders. Technical skills on application security, system security, network security, authentication/authorization protocols. Proficient in Microsoft Office applications (Excel, Word, PowerPoint). Experience with data analytics tools such as PowerBI, Alteryx, Visio, SAP, Workday, AuditBoard, and AS400. Excellent written and verbal communication skills, including listening and interviewing skills. Knowledge of IT and cloud management, Audit assurance, governance, and control frameworks such as COBIT, NIST, ITIL and ISO, Service Organization Controls (SOC) Reporting standards sufficient to interpret and apply IT risk and control concepts. Knowledge of AICPA Information for Management of a Service Organization. Experience with Statement of Assurance and Attestation Engagements (SSAE-18) examinations (performing or reviewing results). Familiarity with ERP systems including Oracle, SAP, and Microsoft Dynamics. Able to work independently and as part of a team, managing multiple priorities within tight deadlines. Able to lead business and departmental projects that require analytical and risk assessment skills. Actively staying abreast of emerging issues involving IT audit, changes in technology, and evolving cybersecurity laws and regulations that could impact the organization. Experienced Auditor focused on improving business compliance, workflow and processes through detailed audits and optimization recommendations. Successful track record of fully evaluating information, structures and procedures and initiating corrective actions. Advanced skills i Experienced Auditor focused on improving business compliance, workflow and processes through detailed audits and optimization recommendations. Successful track record of fully evaluating information, structures and procedures and initiating corrective actions. Advanced skills in [Software].
Overview
8
8
years of professional experience
1
1
Certification
Work History
Senior IT Auditor, IT Auditor
AT&T
01.2019 - Current
- Current AT&T
- Participated in planning of internal audits by collaborating with IT and business management to develop control walkthrough narratives, matrix of key controls, testing approach, and schedule.
- Executed audit procedures including leading interviews, requesting, reviewing, and analyzing evidence, and documenting test steps in detailed, well-supported work papers.
- Conducted comprehensive audits of various systems and processes, both domestically and internationally, ensuring adherence to established standards and regulations.
- Collaborated with team members to conduct thorough risk assessments of diverse locations, systems, and processes, contributing to determination of audit scope and objectives.
- Prepared detailed audit reports and presentations, highlighting key findings and recommendations, and presented them to audit leadership and relevant stakeholders.
- Effectively communicated identified risks and control themes to stakeholders across the organization, facilitating informed decision-making and risk mitigation strategies.
- Contributed to execution of internal initiatives aimed at enhancing quality and efficiency of Internal Audit work products and processes.
- Utilized strong written and verbal communication skills, including active listening and effective interviewing techniques, to engage with stakeholders and address complex issues clearly and concisely.
- Demonstrated proficiency in various areas including IT general controls, cybersecurity, cloud technologies, IT governance, risk, and compliance, and software development lifecycle.
- Acted as mentor to colleagues, providing guidance and support as needed, while remaining open to feedback and opportunities for personal and professional growth.
- Supported audit reporting and issue remediation efforts, including tracking status of open issues and other IT-related findings.
- Oversaw the SOX, PCI-DSS & SOC 2 compliance program.
- Conducted testing, readiness assessment & gap analysis on PCI-DSS, SOX & SOC 2 annual recertification process.
- Conducted security awareness training for new hires.
IT Auditor
Bank Of America
01.2016 - 01.2019
- Planned, led, and completed complex and technical information systems/systems development audits as described in the annual audit plan.
- Ensured the timely completion of the audit project in compliance with audit standards.
- Participated in comprehensive planning and risk assessments relating to each assignment to ensure that the engagement identifies and responds to potential business or reporting risks.
- As necessary, supervised audit team members assigned to assist with specific IT audit projects and provided support to the audit team in the development of Computer Assisted Audit Techniques (CAATs) via ACL or other tools for all types of audits as necessary.
- Performed audit test work and preparation of adequate and sufficient audit documentation in accordance with prescribed methodology.
- Performed an initial review of the audit file to ensure the quality and completeness of work, prior to giving the audit file to management for final review.
- Executed test plans to assess the operating effectiveness of control processes pursuant Sarbanes-Oxley (SOX)
- Developed and communicated recommendations to correct control deficiencies, provide ideas for process enhancements, and followed up on audit findings to ensure they are addressed by process and control owners in a timely manner.
- Maintained business relationships with appropriate levels of management to ensure that Audit is aware of changes in business activities and objectives, and necessary Audit response is developed Skills.
Education
Bachelor of Science - Information Management Cyber Security
Northwest Missouri State University
Missouri05.2024
Skills
- Root Cause Analysis
- Financial records review
- Risk mitigation strategies
- Audit reporting
- Internal Controls
- Compliance standards
- Internal Auditing
- Audit Planning
- Certified Information Systems Auditor (CISA)
- Team Collaboration
Certification
Certified Information Systems Auditor (CISA)
Timeline
Senior IT Auditor, IT Auditor
AT&T
01.2019 - Current
IT Auditor
Bank Of America
01.2016 - 01.2019
Bachelor of Science - Information Management Cyber Security
Northwest Missouri State University
Similar Profiles
Julie ZieskJulie Ziesk
Senior Technical Business Management at AT&TSenior Technical Business Management at AT&T
Daniel RayDaniel Ray
Retail Store Manager at AT&TRetail Store Manager at AT&T
DESTINY MAGEEDESTINY MAGEE
Retail Sales Consultant at AT&TRetail Sales Consultant at AT&T