Jean Cristel Brice Singha
Manager, Risk Advisory | IT Audit & GRC | CISA
Douala
Summary
CISA-certified Risk Advisory professional with 6+ years leading IT audit and GRC engagements across telecom and financial services. Catalant Recognized Expert and CISA Trainer at IPE Douala. Core expertise spans ITGC, SOX/COSO, ISO 27001, and infrastructure risk assessment across SAP, Oracle, and complex network environments. Proven ability to translate technical risk into executive-level recommendations while building team capability — a profile aligned with Manager-level advisory delivery across Francophone Africa and international markets.
Overview
3
3
years of professional experience
4
4
Certifications
4
4
Languages
Work History
IT Audit & Senior Risk Assurance
Huawei Technologies Northern Africa
07.2024 - Current
- Key Responsibilities & Achievements
- IT General Controls (ITGC) Audits: Performed comprehensive audits covering user access management, password policies, segregation of duties (SoD), antivirus, firewall configurations, system backups, incident response, and BCP/DRP compliance using ServiceNow and cloud-based audit tools.
- Reduced critical IT risks by 40% across 70+ audit missions; strengthened compliance with ISO 27001 and NIST frameworks.
- IT Application Controls (ITAC) Audits: Assessed automated controls within SAP and Oracle via PaaS OWS, validating access provisioning, role-based access control, and inactive account deactivation per security policies.
- Implemented remediation actions that improved system security, data integrity, and SOX/ISO compliance.
- Audit Lifecycle Management: Led the end-to-end audit cycle—planning, risk assessment, fieldwork, reporting, and follow-up—ensuring adherence to ITGC, SOX, COBIT, and ISO 27001 standards.
- Improved audit efficiency and enhanced the maturity of internal control processes.
- Annual IT Audit Program: Designed, executed, and monitored the 2024 IT Audit Plan (Huawei–MTN/MS) covering network security, user access control, business continuity, GDPR, patch management, application security, change management, and cloud infrastructure.
- Implemented multi-factor authentication (MFA), improved change approval processes, and standardized audit documentation.
- Commercial & Strategic Advisory: Drafted audit engagement proposals, RFP responses, and strategic analysis reports for the MTNC client to optimize operational audits and business performance.
- Secured major client upgrades: 130+ fiber/microwave link expansions and 250+ router license enhancements.
- Leadership & Mentoring: Supervised and trained junior auditors, reinforcing audit methodology, documentation quality, and professional development.
- Innovation & Continuous Improvement: Integrated data analytics, automation, and AI-driven audit tools to enhance audit coverage and insight generation. Maintained awareness of emerging IT risks, cybersecurity trends, and regulatory changes.
Governance, Risk & Compliance (GRC) Analyst
Huawei MTN MS
09.2023 - 07.2024
- Led enterprise compliance with ISO 27001, SOX, SOC 2 Type II, NIST, GDPR, and PCI-DSS across access management, segregation of duties, and network device configurations (routers, switches, firewalls).
- Performed gap assessments, implemented remediation plans, and improved compliance monitoring through ServiceNow and OWS for real-time tracking.
- Established and strengthened ISMS and BCSM frameworks; enhanced BCP/DRP through redundancy strategies and automated SYSLOG monitoring.
- Coordinated internal and external audits, managed audit evidence, and oversaw remediation activities.
- Identified and mitigated compliance risks, maintained the enterprise risk register, and ensured regulatory alignment.
- Conducted security assessments across IT infrastructure, cloud environments (IaaS, PaaS, SaaS), and networks.
- Oversaw and improved vulnerability management, IAM (RBAC, MFA), and applied CIS Benchmarks to strengthen system hardening.
- Performed control testing and evaluated the effectiveness of security controls.
- Led and delivered ISO 27001, SOC 2, SOX, and HIPAA audits; maintained audit documentation and reported findings directly to the CISO.
- Tracked remediation progress and coordinated communications with technical and business stakeholders.
- Conducted vendor risk assessments, maintained third-party risk registers, and collaborated with Procurement and Business Units to reduce risk exposure.
- Developed and enhanced security governance policies, monitored regulatory changes, and tested and updated BCP/DRP plans to ensure ongoing compliance.
- Designed and delivered security and compliance awareness programs, increasing organizational cybersecurity culture and risk awareness.
- Maintained and standardized procedures, control manuals, and process flow diagrams, ensuring accurate representation of business and technical processes.
Network Security Engineer
Huawei Cameroon ; Freetch LTD
01.2023 - 09.2023
- Implemented IT security controls (firewalls, encryption, backups) to protect business assets.
- Conducted vulnerability assessments and penetration testing on systems and applications.
- Delivered cybersecurity awareness training programs to staff across multiple departments.
- Led incident response and root cause analysis for cyber and fraud events.
- Partnered with internal and external auditors to maintain compliance.
- Key Achievement: Reduced critical vulnerabilities by 40% through proactive risk mitigation.
Education
Bachelor of Science - IT Network Security
ENSET
Douala, Cameroon08-2019
Skills
- Core Competencies – IT Auditor (CISA) IT Audit, RISK ,Governance & Compliance Enterprise Risk Management & Internal Control Data Analytics, Audit Automation & Risk Modeling Process Improvement & Control Effectiveness Professional Judgment & Stakeholder Engagement
- IT Audit & Assurance (CISA-aligned): Risk-based audit planning, scoping, walkthroughs, control testing, evidence management, and reporting
- Frameworks & Standards: ISO 27001, COBIT, ITIL v4, SOX, SOC 2, NIST, GDPR, PCI-DSS
- IT Governance: Policy development, governance maturity assessments, and audit alignment with business objectives
- Critical Thinking & Professional Skepticism: Risk-based decision-making, control evaluation, and audit judgment aligned with ISACA standards
- Stakeholder Management: Engagement with IT, Security, Compliance, Finance, and Executive leadership
Accomplishments
Project 1 — SLA & Service Continuity
Led an operational risk analysis mission addressing service availability degradation (98.2% vs. contractual SLA of 99.98%), resulting in ~XAF 200M in quarterly penalties; designed and implemented a proactive incident management model that restored availability to 99.6% and recovered ~XAF 180M in financial losses.
Certification
• CISA – Certified Information Systems Auditor (ISACA), 2025 Badge : https://www.credly.com/badges/256713e2-fd07-4797-b376-b62bec0dac03/
Interests
ECHEC, TENNIS, TRAVEL, VIDEO GAME
Timeline
• CISA – Certified Information Systems Auditor (ISACA), 2025 Badge : https://www.credly.com/badges/256713e2-fd07-4797-b376-b62bec0dac03/
12-2025
• ISO/IEC 27001 Lead Auditor
10-2024
IT Audit & Senior Risk Assurance
Huawei Technologies Northern Africa
07.2024 - Current
Governance, Risk & Compliance (GRC) Analyst
Huawei MTN MS
09.2023 - 07.2024
• ITIL v4 Foundation,
02-2023
Network Security Engineer
Huawei Cameroon ; Freetch LTD
01.2023 - 09.2023
HCNA / HCDA Carrier IP (HUAWEI)
09-2018
Bachelor of Science - IT Network Security
ENSET
References
- Luc Fabrice, Ngwa, Senior Manager : Technical Operations, Bayobab Mobility, +237 6 77 55 02 13
- Parfait Didier, BayongBob, Operation Director, Huawei Cameroon, +237 6 77 55 04 23
Langues
3,5,4
Réseaux sociaux
@www.linkedin.com/in/jean-cristel-brice-singha-aa2