Summary
Overview
Work History
Education
Skills
Affiliations
Websites
Certification
Additional Information - Tools
Timeline
Generic
OGECHUKWU OZOR

OGECHUKWU OZOR

Calgary,Canada

Summary

Process-driven Compliance Analyst practiced in assessing, tracking and documenting information. Adept at reviewing employee work, company standards and supporting materials in order to make a clear assessment and offer effective solutions. Prepared to offer over 5 years of experience to growth-oriented company, ensuring compliance with industry frameworks like COSO, COBIT, NIST 800- 53, ISO 27001 and others. Has in-depth understanding of IT general controls (ITGC), SSAE 18 attestation, SOX, HIPAA, PCI-DSS, SOC1-SOC2-SOC2 and cloud ERP security evaluations. Demonstrates fundamental audit skills in strategic planning, careful inspection and assessment of controls, precise testing, clear reporting and adequate follow up.

Overview

6
6
years of professional experience
1
1
Certification

Work History

IT Risk and Compliance Analyst

Euna Solutions
Canada
02.2022 - Current
  • Conducted comprehensive audits of IT systems, networks, and applications to identify vulnerabilities and recommend appropriate security measures
  • Developed and implemented information security policies and procedures to ensure compliance with industry regulations and standards
  • Conducted risk assessments and provided recommendations for risk mitigation strategies
  • Conduct comprehensive audits to evaluate the effectiveness of SDLC processes and controls
  • Assisted in documentation of PCI DSS Controls and processes
  • Develop Audit plans, test scripts and procedures to verify the integrity of software development
  • Collaborated with cross-functional teams to investigate and respond to security incidents and breaches
  • Performed penetration testing and vulnerability assessments to identify and address potential security weaknesses
  • Prepared detailed audit reports outlining findings, recommendations, and corrective plans.

Information System Auditor

Nexient LLC
ONTARIO
08.2019 - 01.2022
  • Completed ITGC testing successfully for three clients within designated time span, fulfilling all project deliverables and milestones
  • Identify and prioritize vulnerabilities and deficiencies in data security and payment processing systems
  • Created thorough plan for evaluating IT infrastructure controls, including key controls goals and testing techniques to reduce possible risk
  • Testing internal controls for SOX compliance with financial reports as well as third party standards like PCI-DSS for clients
  • Collaborate with cyber security team to support the assessment, review and evidence collection
  • Conducting IT Audits and assessments to identify and evaluate risks and vulnerabilities and to assure compliance with industry standards and laws.

Audit and Compliance Analyst

Access Bank
Nigeria
02.2018 - 07.2019
  • Performed detailed examinations of financial statements, documents, and data to ensure accuracy and compliance with accounting standards and regulations
  • Identified potential risks and vulnerabilities within the organization's operations
  • Analyzed financial and operational data, interviewed relevant stakeholders, and performed risk assessments
  • Monitored compliance with internal policies, industry standards, and regulatory requirements
  • Assessed whether the organization is adhering to established procedures and identified areas of non-compliance
  • Evaluated the adequacy and effectiveness of internal control
  • Recommended process improvements to continually identify, analyze and fix constraints and challenges
  • Maintained database systems to track and analyze operational data
  • Performed system analysis, documentation, testing, implementation, and user support for platform transitions
  • Performed audits of subsidiaries to protect shareholders and potential investors from fraudulent or unrepresentative financial claims
  • Assist clients, when necessary, in understanding and completing SAQ documents or other compliance documents when requested
  • Keeping tabs and necessary updates of best practices, laws, rules, regulations impacting institutions while also ensuring that the changes are incorporated into the independent assessment process performed.

Education

Associate of Applied Science - Global Business Management

Loyalist College of Applied Arts And Technology

Bootcamp - Information Systems Security

Vulnerabilities, Attack And Cybersecurity Risk

MBA - General Business Studies

Nasarawa State University

Bachelor of Science - Accounting

Anambra State University, Igbariam

Skills

  • IT General Controls
  • PCI-DSS Compliance
  • Cloud Security Assessment
  • Frameworks (COSSO, COBIT, NIST 800-53, ISO 27001)
  • Reporting and Documentation
  • Vulnerability scanning
  • SIEM Reporting
  • IT Auditing
  • Compliance and Regulation
  • Policy development and implementation
  • Software Development Life Cycle
  • Third Party Risk, Vendor Management
  • Project Management
  • Compliance Understanding
  • Research Proficiency
  • Operations Support

Affiliations

Information Systems Audit and Control Association (ISACA)

Certification

  • Certified Information Systems Auditor (CISA), 2022
  • Certified in Risk and Information System Control (CRISC) - In view

Additional Information - Tools

  • ServiceNow
  • JIRA
  • Trustwave
  • Nessus
  • Audit Board
  • MetricStream

Timeline

IT Risk and Compliance Analyst

Euna Solutions
02.2022 - Current

Information System Auditor

Nexient LLC
08.2019 - 01.2022

Audit and Compliance Analyst

Access Bank
02.2018 - 07.2019

Associate of Applied Science - Global Business Management

Loyalist College of Applied Arts And Technology

Bootcamp - Information Systems Security

Vulnerabilities, Attack And Cybersecurity Risk

MBA - General Business Studies

Nasarawa State University

Bachelor of Science - Accounting

Anambra State University, Igbariam
  • Certified Information Systems Auditor (CISA), 2022
  • Certified in Risk and Information System Control (CRISC) - In view
OGECHUKWU OZOR