Senior IT Internal Auditor Cv

Starting...

Senior IT Internal Auditor Cv Hamish Osei Senior IT Internal Auditor 07700 90XXXX hamish.osei@example.com hamishosei Bristol, BS1 4DJ STRENGTHS Practical risk judgement When reviewing system safeguards, focus on the exposure behind each control gap and agree mitigation that system owners can put into practice. Clear reporting On the cross-site controls review, translated technical findings into actionable reporting that earned recognition from the internal audit director. Constructive collaboration Bring technology, operations and compliance teams into remediation discussions so that proposed controls fit the systems and operational context. Colleague coaching Share audit evidence and control-testing guidance with newer team members, helping them approach fieldwork and reporting with greater consistency. Structured analysis Use walkthroughs, sample testing and records review to trace exceptions to their causes and explain the operational risks behind them. SKILLS IT internal auditing Risk-based audit planning Internal controls IT risk assessment Control effectiveness Audit methodologies Information security Operational technology Energy sector compliance Audit reporting Regulatory compliance Remediation monitoring Audit evidence testing Senior presentations Colleague coaching MY CAREER 10.5 Years Senior IT Internal Auditor at Calder Vale Power (3.2 Years) IT Auditor at Larkspur Renewables (3.1 Years) Technology Risk Auditor at Fenwick Grid Services (2.1 Years) Internal Audit Associate at Merebrook Utilities (2.1 Years) SUMMARY Senior IT internal auditor with 10 years of experience assessing technology risk and controls across energy, utilities and infrastructure. CISA-certified, with a BSc in Accounting and Finance, I plan and deliver risk-based audits from initial scoping through reporting and remediation follow-up. I examine the security and effectiveness of business-critical corporate IT and operational technology , identify control weaknesses and agree practical mitigation with system owners and internal teams. Clear reporting helps senior management and non-technical stakeholders understand technical findings, their operational impact and the actions required. I also monitor regulatory and emerging technology risks, contribute to control and procedure improvements, and coach colleagues in audit methods and evidence standards, supporting reliable operations and consistent audit practice. EXPERIENCE Senior IT Internal Auditor Calder Vale Power Aug 2023 - Present Bristol, UK Lead risk-based reviews of corporate IT and operational technology supporting electricity generation and network operations, setting audit scope around system criticality, security exposure and business impact. Evaluated access management, change control, backup and incident response across major systems, documenting control gaps and agreeing proportionate mitigation plans with system owners. Presented detailed audit reports and prioritised findings to senior management , translating technical control issues into clear operational and compliance implications. Worked with internal technology, operations and compliance teams to develop and implement revised IT controls and procedures, then monitored remediation evidence and control effectiveness . Briefed colleagues on audit methodologies , evidence standards and risk assessment techniques, improving consistency across fieldwork and reporting. Tracked regulatory developments and emerging cyber and technology risks relevant to energy and natural resources operations, incorporating material changes into the annual risk assessment. IT Auditor Larkspur Renewables Jul 2020 - Jul 2023 Cardiff, UK Delivered audits across wind and solar operations, corporate platforms and outsourced services, assessing IT systems and processes against business risk and relevant industry standards. Tested user access, privileged accounts and software changes, tracing exceptions to root causes and recommending control improvements that site and central teams could implement. Reviewed system resilience arrangements, including backup restoration evidence and recovery procedures, and reported weaknesses that could affect operational continuity. Prepared clear workpapers and detailed reports for audit management, presenting technical findings to non-technical stakeholders and agreeing accountable follow-up actions. Monitored open recommendations with control owners and checked evidence of implementation, distinguishing completed remediation from controls that still needed improvement. Technology Risk Auditor Fenwick Grid Services Jun 2018 - Jun 2020 Birmingham, UK Assessed technology risks across infrastructure maintenance systems and business applications, using structured interviews, process walkthroughs and control testing to establish how safeguards operated in practice. Analysed incidents, access records and change documentation to identify control weaknesses, then proposed practical risk mitigation for review with IT and operational teams. Supported compliance reviews by mapping IT controls to applicable internal requirements and industry standards, maintaining traceable evidence for audit conclusions. Produced concise findings and supporting reports for management review, explaining technical issues in terms of service reliability, information security and operational exposure. Internal Audit Associate Merebrook Utilities May 2016 - May 2018 Bath, UK Supported audits of finance and operational systems, gathering evidence through process walkthroughs, sample testing and review of system-generated records. Documented access and change-control procedures, investigated exceptions with system users and escalated potential IT risks for senior auditor assessment. Helped maintain audit workpapers and draft reports, building a sound grounding in internal controls , audit methodology and clear communication of findings. LEADERSHIP, AWARDS & RECOGNITION Recognised by the internal audit director at Larkspur Renewables for clear, actionable reporting on a cross-site controls review, 2022. Delivered peer coaching on audit evidence and IT control testing for new audit team members, 2024–2026. EDUCATION BSc Accounting and Finance University of the West of England 2014 Bristol, UK CERTIFICATIONS Certified Information Systems Auditor (CISA), ISACA 2019 Certified Information Systems Security Professional (CISSP), ISC2 2022 TECHNICAL SKILLS Operating Systems: Microsoft Windows, Linux, UNIX Office Software: Microsoft Excel, Microsoft Word, Microsoft PowerPoint Database Platforms: Microsoft SQL Server, Oracle Database, PostgreSQL Network Technologies: TCP/IP, DNS, DHCP Security Technologies: Microsoft Active Directory, LDAP, Kerberos Cloud Platforms: Microsoft Azure, Amazon Web Services, Google Cloud Platform Audit and Governance Platforms: ServiceNow, Archer, AuditBoard Data Analysis Tools: Microsoft Power BI, Tableau, Microsoft Access Backup Platforms: Veeam, Commvault, Veritas NetBackup Infrastructure Monitoring: SolarWinds, Nagios, Microsoft System Center SKILLS IT internal auditing Risk-based audit planning Internal controls IT risk assessment Control effectiveness Audit methodologies Information security Operational technology Energy sector compliance Audit reporting Regulatory compliance Remediation monitoring Audit evidence testing Senior presentations Colleague coaching PROFESSIONAL AFFILIATIONS ISACA, professional member, engaging with the information systems audit and assurance community. Institute of Internal Auditors, professional member, participating in the internal audit community.

File
- Open
- Save
- Save As
- Rename
- PDF Page Setup
- Reset Margins
- Page View
- Preview
- PDF Download
- Show Styles
UK

US English

British English

Spanish (LatAm)

French

German

Japanese

Italian

Portuguese (BR)

Chinese (Simplified)
Log In