Celeste D. Email & Phone Number

Johannesburg Metropolitan Area

NedbankBusiness Information Security OfficerThird Party Risk Management

City Of Johannesburg, Gauteng, South Africa

Develop & implement best practice information security framework and policiesThird Party Management (advise on security, privacy & governance)Incident response and business resilienceInformation Security Risk Management, advise in risk treatment and design of security controlsAssist with development of organisation wide threat and risk management framework (information, privacy & cyber exposure)Review projects (ensure appropriate security safeguards, privacy & governance are in place)Provide guidance and input to information, cyber and privacy trainingLiaison with internal & external stakeholders, including combined assurance providers.Information Security Risk Management and Threat Management Monitoring and contribute to quarterly reporting and other assurance requirements.

Johannesburg Area, South Africa

Responsible for Operational Risk activities in IT , Cyber Security and Information Management, focusing on risk assessments, risk monitoring, development and review of policies, procedures, standards. Development of self-assessment questionnaires to assist stakeholders to manage their applications and processes more consistently.

Strategic and Operational Risk ManagementDevelopment and maintenance of Audit, Risk, Compliance, Information and Governance processes across the businessReview of operational and application controls across existing and new business processesBusiness continuity and disaster recoveryReview of project documentation, testing and assisting projects with the development, design, testing and implementation of appropriate controls.

Transaction Capital

Internal audit reviews include review of the operational business processes and a review of the various applications (i.e. review of relevant application and logical access controls) Our internal audit processes include:Process and system descriptions (which illustrate where the gaps are)Risk and Control Matrices Internal Audit ScopeSupporting work papers and evidenceAdequacy and effecitveness audit reportsInternal Audit Reviews include:Insurance Claims ManagementDebtors Book AnalysisSuspense Account ReviewLimited review of Loan Management System Repossession Process inclding stock managementExtended Credit Process Loan Contract Management

Dunkeld

Provide assurance to management and the Audit, Risk and Compliance Committee with a small audit team. My responsibilities included:Conducting and overseeing reviews as per the audit planCompletion and presention of an audit plan to the Audit CommitteeDocumentation and maintenance of management concerns (risks for organisation)Preparation of Audit Risk and Compliance Commitee PacksDocumentation of Audit Universe and Business ProcessesMonthly Exco submissions

Sandton

Review of the strategic and high risk projects across the various divisions in the bank. The portfolio of projects/programmes reviewed include:Regulatory Reporting for the BankBasel II Implementation (length of programme 2.5 years)BoE Business Bank Merger (18 month project)Transacitonal Banking (including internet banking)Credit Card related projectsRetail (implementation of Mzani)Credit, Collections and Collateral related projectsDepending on the risk profile of the project/programme or portfolio the audit assignment would focus on one or more of the following:Requirements ManagementApplication ControlsTesting (Unit, System and User Acceptance)ImpementationPost ImplementationProject Management and Project GovernanceBusiness Case and High level design

Johannesburg Area, South Africa

Various business related audit reviews were completed during my time at FirstRand / FNB. Reviews were conducted in the following divisions:WesBankHomeloansWealth Management Ansbacher (Private Bank)Credit Risk (Large Corporate)Nature of the various audit assignments included the following:Loans ProcessingCollectionsFinance Human ResourcesCredit Risk Management (end to end)Back office processesSecurities

Johannesburg Metropolitan Area

Audit support to the Internal Audit Team

Certified Information Systems Auditor (Cisa), Auditing And Information Systems, Professional Certification

Bcomm Honours, Businessmanagement

Activities and Societies: Risk Management Strategic Management Investment Management Financial Management Information Management

Bcomm, Economics And Human Resources

Matric Certificate, English, Afrikaans, Maths, Science, Accounting And Biology

Certified Information Systems Auditor (Cisa), Audit, Risk And It