Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

AYOBAMI ABASS

Birmingham

Summary

Accomplished professional with a strong foundation in IT security and risk management, specialising in SOX 404, COSO framework, and COBIT principles. Demonstrates exceptional leadership and project management skills, effectively communicating technical risks to non-technical stakeholders, including senior executives. Extensive experience in IT controls testing related to ITGCs, ITACS, and InfoSec controls. Proficient in critical thinking and creative problem solving, with advanced skills in root cause analysis. Adept at using MS Office, SharePoint, One Drive, AuditBoard, and Archer to enhance organisational efficiency. Committed to leveraging deep knowledge of risk assessment standards such as ISO27001, NIST, SOX, GDPR, and PCI to drive results-oriented outcomes.

Overview

9
9
years of professional experience
7
7
years of post-secondary education
1
1
Certification

Work History

Technology Risks Analyst

NHS
United Kingdom
08.2024 - Current
  • Conducted risk assurance assessments, control design evaluations, and control effectiveness testing for IT general controls (ITGCs) and application controls to identify vulnerabilities, gaps, and areas of improvement, improving systems efficiency by 45%.
  • Monitored segregation of duties (SoD) and user access controls, ensuring compliance and minimizing risk exposure.
  • Worked closely with IT teams to evaluate the relevance of IT controls for system changes, new implementations, and software upgrades, while assessing their impact on the organization's security posture.
  • Led the development of training materials, compliance best practices, and awareness campaigns to strengthen IT risk and governance programs.
  • Tracked and analysed IT compliance trends, providing insights and recommendations to enhance internal control effectiveness.
  • Develop and distribute IT compliance reports, dashboards, and risk metrics for senior management, internal audit, and external regulators.
  • Identified opportunities to streamline IT compliance efforts by leveraging automation, analytics, and risk management tools.
  • Stayed abreast of emerging technical trends, and cyber-related risk exposures that impact critical business processes, and the potential impact on Enterprise-level risks.
  • Remediated audit findings and IT issues for audit and self-identified issues, including development of remediation plans, and leading execution of remediation plans to remediate risks in achieving operational and compliance objectives.

IT Sox Auditor

Nigerian Breweries Plc
Lagos, Nigeria
02.2021 - 07.2024
  • Owned the end-to-end execution and oversight of the SOX compliance program.
  • Ensured compliance with Section 404 of SOX, including appropriate documentation, testing, and optimization of internal controls.
  • Led risk assessments to identify and prioritize key financial, operational, IT general controls (ITGCs), IT application controls (ITACs), and business process controls.
  • Ensured the design, implementation, and testing of all relevant controls-including ITGCs, ITACs, and business process controls-are fully integrated within the SOX compliance framework to support accurate and reliable financial reporting.
  • Collaborated with IT, technology, and business teams to assess the impact of system or process changes on all controls, maintaining their effectiveness throughout business and technology transformations.
  • Regularly reported SOX program updates, risks, and remediation actions to the CFO, Audit Committee, and other senior stakeholders.
  • Partnered with cross-functional teams, including accounting, finance, IT, and external auditors, to ensure alignment on SOX requirements.
  • Served as the primary point of contact for external audit teams (KPMG) related to SOX compliance efforts.

Associate Auditor

Motormata
Lagos, Nigeria
04.2016 - 07.2020
  • Conducted risk assessments, identified areas for improvement.
  • Streamlined audit processes to improve efficiency.
  • Contributed to the development of annual audit plans.
  • Established strong relationships with management and in technology, related control groups such as Risk Management, Compliance, and Audit colleagues.
  • Tested internal controls against stated policies and procedures.
  • Ensured accurate financial reporting with meticulous auditing techniques.
  • Collaborated with external auditors to ensure transparency and accuracy in all transactions.
  • Maintained comprehensive knowledge of current industry regulations by attending professional development courses.
  • Prepared detailed audit reports summarizing scope, procedures, findings, and recommendations.

Education

MSc - InternaLonal Business with Data AnalyLcs

Ulster University
01.2024 - 02.2025

BSc - Computer Science

Ladoke Akintola University of Technology
09.2009 - 02.2015

Skills

  • Proven ability to communicate technical risks and control concepts to non-technical stakeholders, including senior executives and audit committees
  • Strong leadership, project management, and organizational skills, with a results-oriented approach
  • Deep knowledge of SOX 404, COSO framework, COBIT principles, IT security, and risk management practices
  • Extensive knowledge of IT controls testing related to ITGCs, ITACS and InfoSec controls
  • Exceptional organizational/time management skills, attention to detail
  • Strong Risk Assessment knowledge and understanding of different standards such as ISO27001, NIST, SOX, GDPR, PCI
  • Advanced skills in critical thinking, creative problem solving, and root cause analysis with the ability to lead teams through this process
  • Proficiency in MS Office, SharePoint, One Drive, AuditBoard, Archer

Certification

  • ISO27001:2022 Lead Auditor
  • Certified Information System Auditor (CISA)
  • Managing Compliance Program

Timeline

Technology Risks Analyst

NHS
08.2024 - Current

MSc - InternaLonal Business with Data AnalyLcs

Ulster University
01.2024 - 02.2025

IT Sox Auditor

Nigerian Breweries Plc
02.2021 - 07.2024

Associate Auditor

Motormata
04.2016 - 07.2020

BSc - Computer Science

Ladoke Akintola University of Technology
09.2009 - 02.2015
AYOBAMI ABASS