Evan Oei Email & Phone Number

Academic Teacher in IT Risk Management module for the Post HBO Risk Management course. The IT Risk Management module provides an overview of the activities to identify and manage risks in IT environments that includes risk governance, risk evaluation, and risk response. The course describes the principles of IT risk management, the responsibilities and accountability for IT risk, how to build up awareness, and how to communicate risk scenarios, business impact and key risk indicators. Included in the course: • Risks and trends in IT Risk Management• AIC Triad• COBIT and ISO27001• Formulating IT Control Measures• IoT• PKI• Cybercrime• Privacy

As IT Auditor, I have covered a broad spectrum of local and global IT audits within Rabobank, including:• IT Governance• Cybercrime • Identity Access Management • Vulnerability Management • SIEM• PKI• Business Continuity Management • Middleware Management • Central Backup Management • Australia IT General Control • Service Management Migration • Swift • Central Storage Management (SAN) • International Direct Banking • Market Abuse • Desktop Management & Remote Access • Security Risk Management • SOX ITGC • FGH Real Estate Bank IT Migration • Mobile Device Security • Anti Money Laundering (AML) • Platform Management • Liquidity Coverage Ratio Risk Management Tasks included:• Gather and research background information, which sets out the planning, objectives and scope of the audits;• Ensure all relevant stakeholders are involved;• Identifying key risks and challenges;• Formulate work programs;• Testing on design, existence and operating effectiveness of businesses processes and systems;• Effectively communicate progress, concept findings and recommendations to the auditee;• Preparing formal audit reporting.

Started a new Taco Mundo restaurant in Zoetermeer (opening date 10/3/2014). This involved writing up a business plan, financial planning, market research, training at franchise company stores, building the restaurant, intensive marketing, creating and managing a new team. As a result, producing Mexican food conform the Taco Mundo franchise formula. The Zoetermeer team consists of 20 part-timers and a team lead. Focus on the customer, quality and service, passionate for results, fun place to work, along with a choice of healthy food has proven to be profitable and growing.

The Hague Area, Netherlands

Project: Fraud Risk Assessments Annually KPN carries out Fraud Risk Assessments. I was responsible for inventorying the risks within KPN business processes (Invest to Capitalize, Record to Report, Order to Cash and Source to Pay). These assessments are an important input for SSO Management to evaluate and mitigate top fraud risks.Project: IT Strategy Audit I have audited the IT strategic direction of KPN and compared their course to the direction required to succeed in a changing environment. Analysis included how well KPN was internally aligned to support the strategy, and how viable the strategy was when compared to external market and competitors. Distinguishing the two categories, the internal assessment and the external assessment, provided valid findings and recommendations to top management. Project: Preventel Audit Credit and Risk Annually the organization Preventel initiates an internal audit by the following participants: KPN, Telfort, T-Mobile and Vodafone. I was responsible for carrying out the audit on behalf of KPN Mobile and Telfort Mobile. The audit has proven KPN Mobile and Telfort Mobile to fulfil Preventel requirements, delivering limited assurance of the security and reliability of the KPN database related to credit and risk control.Project: Business Continuity Management To ensure continuity and availability of business processes, Business Continuity Plans are periodically tested. I was responsible for the preparation of Business Continuity Plans on behalf of KPN Mobile. As a result, the Business Continuity Plans have guided the availability of KPN Mobile business-critical applications.

Project: SOX Financial Statement I have contributed to the SOX Financial Statement by auditing KPN and Telfort design, existence and operational effectiveness of the automated and IT-dependent application controls and the relevant IT general controls. As a result, the audits delivered limited assurance of the IT organization integrity of financial data.Project: Telfort Frankfurt Datacenter ISAE 3402 For the Annual Financial Statement, I was responsible for reviewing the Telfort Frankfurt Datacenter ISAE 3402 assurance report. As a result, the assurance report scope was broadened to better suit Telfort Datacenter.Project: Implementation IAM (Identity Access Management Tool) Contributing to the implementation of IAM, I was involved in identifying and assessing critical and Compliance relevant applications. The implementation was based on several key features: functional design authorization matrix and periodic review, defining roles and functions and periodic review of authorized users. With the successful implementation, accuracy, reliability, completeness and usability increased.

Project: Paperless Managed ICT projects in the consumer (KPN Residential) and business market (KPN Mobile) for the KPN post billing and billing presentment department. Tasks included aligning business and IT, project planning and procurement management, preparation of impact analysis and test plans. As a result, the billing process has accelerated and reduced postage costs.

Project: Deciphering Key Determinants to ICT Project Success This research was prepared to assist students and professionals on the subject of ICT project management and ICT project planning. Relevant ICT project parameters were analysed and key determinants to ICT project success were deciphered, such as technology complexity and knowledge management. I was granted the opportunity to collect data from 27 ICT projects using a survey study at the company, Atos Consulting. Based on the 27 ICT projects, key determinants to ICT project success were deciphered using statistical analyses. Additionally, with the support of Delft University of Technology supervisors and Atos Consulting project managers, the link between the research scientific relevance and managerial relevance was fulfilled.

Every academic year, TU Delft organizes a laptop project. This project enables (future) students and employees to buy a laptop at discount price, before the start of the new academic year. As Technical Support, Hardware and Software Tester, I was responsible for testing production software operating on the users workstation hardware. Tasks included:• Test and troubleshoot software and firmware• Develop new test cases that validate new features, verify issue resolutions, perform stress tests and identify weak points• Documenting test methods and procedures• Incident handling and customer support

Executive Master Program, It-Auditing (Re)

Activities and Societies: Scriptie: 'Het winnen van vertrouwen in IT Outsourcing relaties'

Msc, Management Of Technology

Activities and Societies: Member of the Curius Study Association Lecture Committee (2007-2008)Faculty of Technical, Policy and Management

Bsc, Information Technology

Faculty of Electrical Engineering and Computer Science