Charles Udoh Email & Phone Number

Aubrey, Tx, Us

Dallas, Texas, United States

• Lead third party security risk assessments and communicate third party risks to senior partners.• Lead the ongoing monitoring of third parties through industry benchmarking tools and threat intelligence fosters.• Partner with legal, compliance, procurement, Technology, and business team to identify specific third-party security risks and recommend appropriate risk treatment action plans with pragmatic solutions to risk and control issues.• Respond appropriately to third-party cyber risk incidents, the related investigations, managing situations with discretion, sensitivity, and objectivity, and with due consideration of chain-of-custody.• Review security schedules as part of the contracts; Participate as a domain specialist in contract negotiations.• Support the risk reporting and key metric processes and assist with coordinating and communicating results of third-party risk assessments.• Provide information security training for all employees to ensure business continuity.• Communicated control gaps and audit matters to senior management and appropriate stakeholders for appropriate corrective action efforts to be taken.• Perform post and pre SDLC implementation review to determine design adequacy and operating effectiveness of implemented controls.• Reviewed SOC I type II and SSAE 18 reports and performed SOC I, II, III and SOC I type I audits.

Dallas, Texas, United States

• Executed ITGC testing for SOC 404 compliance in public companies, and Service Organization Control (SOC) reports in compliance/SSAE18 while auditing Windows and UNIX logical access controls, and administrative access review.• Worked with several clients on credit risks, expectations, and requirements in helping them to ensure risk governance, tracking, compliance, and oversight is accurate using audit board, archer while applying several frameworks like NIST, PCI-DSS.• Third party vendor reports collect and centralize key vendor details RSA Archer Cyber GRX Third-Party Risk Management. Streamline vendor documentation with AuditBoard’s Third-Party Risk Management solution.• Vulnerability assessments improved localized risk intelligence to minimize threats to the business, systems & employee safety. Familiar tools Splunk, Tenable Nessus, Qualys, Veracode.• Perform application penetration tests across public and private networks, assessments of security awareness training using social engineering.• Performed oversight and challenged the front line across all operational risk routines including plan, identify, assess, and validate controls, mitigate risks, monitor, and report. Audit and compliance.• Communicate as required with IT department/ Business owner on the status of outstanding audit recommendations, both internal and external; and facilitate timely remediation.• Participated in SAP transaction testing to perform included testing of segregation of duties which assisted in improving user management, authentication management and authorization.

Canyon, Texas, United States

• Evaluated IT general controls (ITGC) including information security, change management, data center, third-party risk, identify and access management, physical security, IT security operations, and program and project management audit.• Reviewed control descriptions, process narratives, and testing strategies for reasonableness and accuracy.• Part of the IT Audit and Compliance team providing guidance on ITGC, internal controls compliance globally.• Work on improvements for provided security services, including the continuous enhancement of existing methodology material, and supporting assets.• Performed scoping and scheduled walkthrough with members of the business and IT regarding the purpose of testing ITGC, provided guidance on the implementation of ITGC, and provide suggestions on how to improve their ITGCs.• Worked with process owners in the creation, updates, and maintenance of Risk and Control Matrices (RCM) for processes in scope during the risk assessment and walkthrough related activities.

Amarillo, Texas, United States

• Resolved 13 unexpected technical difficulties and communicated solutions with clients and representatives. • Recommended improvements to technical practices to enhance operations by 23%.• Review business and technical assessments questionnaires and evidence.• Overhauled analysis of proposed systems, offering input on suggested performance metrics and more.• Conducted the review of key Information Technology controls such as Backups, Data Integrity Testing, Audit Logs, Remote Access Control, Application-Level Security and Environmental Controls.• Implemented 8 system updates to reduce impact on efficiency and equipment.

Tampa/St. Petersburg, Florida Area

• Participated in annual risk assessments to determine the adequacy of internal controls in mitigating identified risks. Compliance and risk management using GRC tools.• Perform various walkthroughs and test of controls to establish design and operating effectiveness.• Executed IT infrastructure controls, testing Operating System, Servers, Databases, and Network.• Performed the annual SOX and PCI DSS compliance audits, testing primary controls to determine design appropriateness and operating effectiveness. US Banking and Payment Card Industry (PCI)• Document concise work papers that accurately capture testing results, and communicate conclusions based on supporting evidence evaluated.• Conducted gap analysis of management directives- policies, standards and procedures ensuring alignment with industry-leading-practices. Governance, Internal controls and quality assurance.- Perform analysis employing designated tools Citi Smart, Google, Lexis Nexis, FINCEN, and other proprietary systems to identify patterns, risks and anomalies within Citi global transactions.- AML risk review and SAR filing for FINCEN.- Documentation and analysis referencing key facts uncovered in the research process and identified in the analysis process.- Enhanced Due Diligence to mitigate suspicious client account activity.- Finalize an appropriate conclusion based upon the research and activity.- Prepare Suspicious Activity Reports for regulatory filing that are fully compliant with standards, policies and procedures and are well written.

Edison, Nj

Retirement Plan Administrator. 2007- 2008 Major responsibilities undertaken as a Plan administrator were as follows,Generating quarter end reports to clients and upper management.Reconciliation of outstanding share balances in accounts.Managed database system using SCRIP.Ensure proper documentation is submitted for dividend reinvestment.Improved daily transaction processes using VPN with Windows 2000 server.

Int'l/Domestic New Account Specialist/Branch support. 2005 - 2007Served as team coordinator for North America branch support, utilizing internal customized document review systems and client update forms.Resource management within PeopleSoft.Account maintenance and portfolio management, IBM mainframe.Served as liaison between IT group and Client service associates/Back office operations.

Jersey City, Nj

2004 - 2005During the merger and acquisition by Bank of New York, the client services group developing processes to facilitate the transition. Daily activities were;Creating spreadsheets for IT developers.Client account statement reporting.Limited cold calling to high net worth clients. Deploy financial reporting system and subsystems that reduced online response times.

Master Of Finance, Business Administration And Management, General

Activities and Societies: Phi Beta Lambda

Business Administration/Finance Bsc, Msf

Business Administration/ Management A.S, Finance, General

Activities and Societies: President, Phi Beta Lambda

Bachelor Of Applied Science - Basc, Pre-Dentistry Studies

Associate Of Science (A.S.), Computer And Information Sciences, General