Sithembile Shezi, Cisa®, Cism®, Asociate Cciso Email & Phone Number

Gauteng, South Africa

- Lead cyber security assessments and manage teams to deliver security strategy and transformation programmes.- Maintain relationships with senior stakeholders and responsible for the quality of the final deliverables and reports.- Leading a portfolio of cyber engagements, directing and developing teams to deliver the highest quality Cyber Security solutions and services.- Managing the production of reports and via review ensuring the highest quality deliverables prior to Director / partner review.- Contributing to the development of the existing cyber risk team acting as mentor and coach to the junior members of the team and leading by example.

Johannesburg Metropolitan Area

- Conducting and leading Information Security Assessment against EY Methodology and leading practice frameworks and common standards, against domains: ArchitectureAsset ManagementUser AwarenessBCP/DRData ProtectionGovernance and organizationHost SecurityIdentity and Access ManagementIncident ResponseMetrics and ReportingNetwork SecurityOperationsPolicy and StandardsPrivacySecurity MonitoringSoftware SecurityStrategyThird Party ManagementThreat IntelligenceVulnerability Identification & Remediation- Conducting and leading teams in Infrastructure security assessments.- Conducting and leading teams in Sox Infrastructure security assessments.- Conducting and leading teams in PCAOB Cybersecurity assessments.- Conducting and leading teams in IT Disaster Recovery assessment.- Conducting and leading teams in Business Continuity assessments.- Assist clients in assessing the designing and effectiveness of their identify and access management solutions.- Leading teams in conduction threat and vulnerability assessments, evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.- Leading teams in conducting attack and penetration on infrastructure, network, web application.

Durban Area, South Africa

Duties- Documentation of client business processes using MS Visio, preparing audit Work Papers in according to established department guidelines and IIA industry standards.- Evaluating the adequacy of the security and processing controls as they relate to each audit, and the effectiveness of general computer controls in effect in the IT environment.- Project Assurance reviews using the MRPG project assurance methodology.- Client management in reaching consensus on exceptions noted and recommendations with IT and business, presenting of reports to audit management and business.- Reviewing the means of safeguarding information assets and monitoring of ongoing performance metrics established by the IT and Security Departments, through participation in Data protection projects and IT Security Policy reviews.- Preparing and submission of requested documentation and reports for external audits and regulatory examinations.- Providing assistance to Director of Internal Audit and the IS Audit Manager on special projects and assignments.- Presenting audit findings or other relevant information to Senior Management on the effectiveness and adequacy of risk management, governance, and internal control procedures.- Representation of Internal Audit on CAB (Change Management Advisory Board) to provide guidance and advice when required.- Representation of Internal Audit on Data Protection Project, for governance and assurance.- Representation of Internal Audit on Cyber Security Program committee when required.- Developing and maintaining effective interpersonal relationships with staff and management.

Durban Area, South Africa

Duties- Resource allocation, Scope and Budget management.- Client stakeholder management including client kick off and close off. - Audit team oversite, support and management of junior team members.- Performing risk-based audit assessments and creating audit procedures based on NIST, Cobit and EY Methodology.- Audit work review of junior member work.- Draft audit report preparation, with practical recommendations, appraisals, or analyses that will assist the clients in rectifying noted exceptions.Audit Types:- External and Internal IT Audits.- Application Controls Review.- IT General Controls Review.- User Access Management Review.- IT Change Management.- Business Continuity (Backup operations) review. - Other IT Security Controls review.- IT Governance audit review.- IT Policy review.- IT Incident Management.- SLA / Contract Management review.- South African: Auditor General contract out audits.- IT Security review using auditing tools: Nessus (running of scans and review of output), In-House Security Scripts (running of scans and review of output) for Database and Operating System security assessment.IT Environments: Windows Active Directory, Windows Server 2008 – 2012, Windows SQL Server, Redhat Linux, Oracle EBS.Audit Tools: Teammate, EY Canvas, Tenable Nessus, Inhouse Security Scripts.Audit Sector Experience: Steel and Aluminum, Oil and Gas, Auditor General, Retail, Banking, and Motor Industries.

Durban Area, South Africa

Duties- Quality Control: IT Process Quality control procedure management and implementation.- IT Induction and Security Awareness training: Perform IT security awareness and incident reporting, Business applications i.e. usage of local machine backup’s and retrieval, antivirus, securing of removable media (usb), phishing emails etc., Training users on usage of secure IT security channels: securing public wifi connection, 3G usage and Virtual Private Network (VPN).- Business Continuity: Management of backup maintenance and restoration testing, Offsite storage process for Backups, Data recovery on crashed machines, data restore from remote backup Server or offsite tapes.- IT Operations Project Management: Machine Upgrade rollout for staff compliment of 300, Image Loadset Upgrades, Dell Returns (Machine Lease Agreement Management), Business Application Upgrades: Internal Software Piloting, Testing & reporting. - IT Incident Management (ITIL framework): Managing of IT incidents from point of reporting to completion by assigning priority and severity after performing analysis of reported incident, Managing IT incidents using service management tools and assigning & re-assigning of work, Third party and SLA management.- Onsite Support: Route course analysis for service disruptions including, hardware failure for Network, Network LAN & Wi-Fi maintenance and monitoring, Remote support using remote tools for software configuration, support and installations, Active Directory Users and Computer Account management, Installation & Support of Ernst & Young Business Applications, Software, Patch, Antivirus update management and monitoring

Certified Information Systems Auditor® (Cisa), Information Systems Auditor, Cisa

Activities and Societies: Certified Information Systems Auditor® (CISA) CISA(Certified Information Systems Auditor)

Post Graduate Diploma Information Technology Management, Computer/Information Technology Administration And Management, Nqf8

2020 Registered.

Nd Information Technology, Information Technology

I studied ND Information Technology at Mangosuthu University of Technology; Took part in Centre for Skills Technology Transfer Sita.

Certified Information Security Manager®, (Cism)

Activities and Societies: Information Risk Compliance IT Governance IT Risk Management IT Security IT Security Incident Manager IT.