Toni Z. Email & Phone Number

Canada

My role includes:• Identification of risk and control assessment throughout development phases. Areas include networks, operating systems, databases, security, disaster recovery and BCP. • Ensuring compliance with data confidentiality, integrity and availability. • Carrying out periodic due diligence and ongoing monitoring using Security Scorecard• Execute threat modelling exercise to determine higher likelihood threat events to inform cybersecurity risk modelling• Documentation gathering from all stakeholders and labelling to aid audit• Carrying out of walkthroughs• Testing of controls and compilation of Audit report • Ensuring compliance of PCI DSS standards• Develop concise, tailored cybersecurity awareness content, therefore improving targeted end-user cyber awareness• Continuous development of cybersecurity awareness content for emerging threats to reduce operational risk to tailored audiences• Ensure policy documents are aligned with business objectives, implementable, and practical for compliance • Ensuring purpose, scope, authority, and policy statements incorporate operational perspective and constraints• Reporting on audit of subset of NIST SP 800-53 cybersecurity controls to include interview, document review, and testing of systems to support compliance audit activities.• Ensuring risk is residual and properly managed

Lagos State, Nigeria

• Evaluated IT internal controls reviews and attestation engagement.• Conducted evaluations on IT controls' effectiveness by performing walkthroughs, testing activities, and reviewing documentation.• Prepared management reports and audit committee documents on audit strategy, noted observations and remediation road map for presentation to the Audit Committee and senior management.• Implemented and tested controls throughout the waterfall model phases to ensure compliance and mitigate risk. • Tested for effectiveness (TOE) of control systems during the SDLC and after go live• Used metrics to measure the effectiveness of the SDLC processes and identify areas for optimization.• Reviewed SDLC test strategies and plans tailored to specific project methodologies, such as Waterfall and Agile. (Including Requirement gathering, system design, implementation, Testing, Deployment, Monitoring phases.)• Conducted comprehensive controls testing for IT domains, assessing design and operating effectiveness to ensure compliance with organizational standards and regulatory requirements.• Collaborated closely with cross-functional teams to identify and document testing requirements• Developed and executed testing plans for Governance, Security, Service Delivery, and Application Development• Delivering accurate and timely reports on findings and recommendations.• Performed IT General Controls testing on all technology layers such as system access, computer operation program development and business systems controls • Evaluated control effectiveness through ITGCs (Access Control, Program Change, Computer Operations) • Engaged in continuous improvement initiatives by analyzing test results and proposing enhancements to existing controls and processes.• Participated in team workshops and brainstorming sessions, contributing to a culture of collaboration and innovation.