Daniel Morka Email & Phone Number

Dedicated and highly motivated graduate in Economics specializing in Data analysis and consultancy, financial control, financial planning, and risk analysis with a multifaceted skill set and academic background, combining Information IT Audit using frameworks such as COSO and COBIT, I have great ability in conducting Information Technology General Controls (ITGCs) testing, Risk Assessment, SOX audits, and Application Controls. Information Security Manager, and certified Content Moderator. Eager to bring a unique blend of analytical prowess, System Security expertise, and customer-centricity.

• 

  Information Technology Auditor

  Rena Consulting

  Jan 2003 - Present

  *Assisted in technology, operational, Sarbanes-Oxley (SOX), and Service Organization Controls (SOC) audits throughout the process, ensuring compliance with audit methodology and standards from planning to execution.*Evaluated and performed end-to-end risk and control environment analysis to identify significant gaps and weaknesses in partnership with stakeholders, including process owners and control officers.*Documented process activities and associated risks and controls, including process descriptions, process prioritization, and top-down risk profiles Support and document the determination of inherent risk ratings, control ratings, and residual risk ratings of information risks.*Provided project management support in tracking and coordinating the execution of risk and control self-assessment (RCSA) activities.*Supported iterative review and challenge of assessment results, collaborating with appropriate stakeholders across the lines of defense.*Participated in control testing walkthroughs and prepared meaningful documentation to support testing conclusions.* Coordinated control testing activities, including logistical scheduling and document retrieval to support control testing by internal requirements.*Consulted with the risk assessment team and other stakeholders to ensure control testing is in alignment with broader risk assessment activities. *Performed risk assessments to thoroughly understand the processes in scope, rated the impact and likelihood of risks occurring, and identified and sought key stakeholders within the company to verify the risks' identification, assessment, and management.*Assisted in technology, operational, Sarbanes-Oxley (SOX), and Service Organization Controls (SOC) audits throughout the process, ensuring compliance with audit methodology and standards from planning to execution.*Performed IT General Controls (ITGCs) and IT Application controls (ITAC) testing to establish design adequacy and operating effectiveness.