Saheed Shittu. Cism,Cisa,Ccna,Cissp Email & Phone Number

Cypress, Tx, Us

Houston, Texas, United States

•Led the development of security governance, policies, and procedures to safeguard sensitive data, ensuring compliance with regulatory requirements.•Managed the assessment and mitigation of risks organization-wide, conducting thorough risk assessments, identifying gaps, and devising effective mitigation plans.•Oversaw the execution of audits, assessments, and compliance activities to validate adherence to standards.•Act as a liaison with external auditors, regulators, and stakeholders on GRC-related matters.•Develop and maintain key performance indicators (KPIs) and metrics to measure the effectiveness of GRC initiatives.•Oversee the execution of audits, assessments, and compliance activities to validate adherence to compliance standards.•Evaluate the effectiveness of Continuous Monitoring Plans, providing quarterly briefings on system compliance.•Develop and maintain key performance indicators (KPIs) and metrics to measure the effectiveness of GRC initiatives.•Conducted third-party vendor security risk assessments as required to support governance efforts.•Devised strategies to enhance awareness and provide training for stakeholders, employees, and technical solutions.•Designed and collaborated with various business units to ensure controls were adequate, appropriate, and effective.•Utilized cloud security controls to bolster security posture, researched emerging threats, and made recommendations, focusing on Microsoft Azure.•Act as the Global Single Point of Contact (SPOC) for IT audit activities and coordination between MRC Global and third-party auditors.•Proactively addressed security incidents and breaches, conducting investigations, assessing their impact, and implementing remediation measures to prevent recurrence.•Completes SOC1/SOC2 reviews and gap assessments.•Led the development of information security compliance programs, ensuring alignment with defined requirements, policies, and regulations.

Houston, Texas, United States

•Act as the Global Single Point of Contact (SPOC) for IT audit activities and coordination between MRC Global and third-party auditors.•Performs third-party Vendor security risk assessments, as required to support governance efforts.•Conduct security risk assessments and facilitates review of cloud and hybrid cloud security Posture.•Conduct security awareness training for all employees and create simulated phishing test to detect the effectiveness of the program.•Develops learning and awareness programs to cultivate a culture of cybersecurity within an organization.• Develop metrics to assess the effectiveness and impact of Security Awareness & Communications initiatives and tools.•Utilizes cloud security controls to improve security posture, and research emerging threats relevant to cloud operations. Stay up to date on the latest cybersecurity threats and vulnerabilities, and provide recommendations for addressing them, with a focus on Microsoft Azure cloud security.• Participates in audit walkthroughs with internal and external representatives as required.•Coordinates audit testing with all required stakeholders•Orchestrates the collection of evidence from MRC Global team members as required by third-party audit requests.•Tracks and communicates audit timelines and deliverables.•Develop, implement, assign, and monitor third-party vendor assessment.•Completes SOC1/SOC2 reviews and gap assessments.•Manages segregation of duties checks in the SAP GRC application.•Implement, monitor, and adhere to best practices and process improvements for global IT audit compliance.•Worked with the security team to develop, manage, and maintain the firm’s information security program, security awareness program, and insider threats.•Handle complaints and escalations when deviations in IT audit outcomes occur.•Leads third-party risk/threat to third-party vendors by assessing vendor risk, impact, and response to risk/threats.

•Managed end-to-end IT audits, including planning, scoping, fieldwork, testing, analysis, and final audit report preparation.•Developed tailored control matrices for client applications during audit planning phases.•Supported GRC team in updating governance policies across diverse platforms.•Conducted walkthroughs and testing of IT General Controls for financially critical systems.•Evaluated IT General Controls (ITGC) for design and effectiveness, analyzing findings related to change management, IT operations, and access controls.•Implemented risk-based approaches to ITGC, identifying and managing control risks.•Supported IT department’s Business Continuity Planning and Disaster Recovery Program.•Utilized Archer for tracking GRC information and risk management.•Prepared concise audit reports for management and subsequent audits.•Conducted financial, compliance, and operational audits.•Assessed security documentation supporting ISMS and maintained ISO 27001 controls.•Monitored cybersecurity policy compliance and standards.•Oversaw disaster recovery and business continuity strategies, including risk assessments.•Collaborated cross-functionally to ensure security control adherence.•Conducted comprehensive assessments of IT security controls.•Assessed information systems based on the Risk Management Framework (RMF).•Conducted security testing and control assessments for client applications.•Led client projects, providing technical leadership in cybersecurity.•Planned and executed IT audits across infrastructure and applications.•Developed risk matrices, system-level assessments, and control narratives.•Prepared SOX deliverables, including walkthroughs and process improvements.•Planned and executed IT audits, special reviews, process control assessments, and SOX compliance tests.•Led risk assessments of technology infrastructure and evaluated IT operational processes.•Communicated risks and recommended process improvements and control enhancements.

Lagos, Nigeria

• Performed special audits and assignments as required, assisting corporate auditors and audit managers in working with both their internal and external audits.• Supported Audit Associates and Seniors in the identification of key risk areas by performing process work through and flowcharting of controls.• Reviewed contracts for compliance and privacy-related issues.• Wrote and presented reports outlining findings and recommendations from compliance audits.• Identified potential areas of compliance vulnerability and risk to develop and implement corrective action plans.• Conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls.• Conduct assessment of security documentations supporting the Information Security Management System (ISMS).• Responsible for gathering and maintaining supporting documentation for ISO 27001 controls.• Monitor and assess compliance with cybersecurity policies, standards, and regulations.• Oversaw organizations disaster recovery and business continuity strategies, including business impact analyses, risk assessments, and strategy selection.• Assist with updating, organization, and annual testing of Disaster Recovery plans.• Conduct and support Business Impact Analysis assessments across the organization.• Collaborate with cross-functional teams to ensure adherence to security controls.