Ken Okoh

Led and executed cybersecurity and technology audit engagements across the enterprise, including planning scopes, objectives, risks, budgets, and timelines. Assessed IT general controls and cybersecurity control effectiveness, including user access review processes and privileged access governance. Reviewed and validated access and permission controls in Active Directory, Microsoft Entra ID, and CyberArk, then communicated findings and remediation recommendations to senior stakeholders. Provided coaching to audit team members and maintained audit documentation for quality and regulatory expectations.

Performed IT general controls and IT application controls testing to evaluate design adequacy and operating effectiveness across IT infrastructure and applications. Supported SOX compliance testing using COSO and COBIT-based approaches and contributed to enterprise risk assessments for technology-related risks. Conducted SDLC pre- and post-implementation reviews and performed BC/DR audit work to evaluate resiliency and recovery capabilities. Produced audit reporting, tracked remediation actions, and maintained evidence and workpapers in GRC platforms.

Conducted ongoing risk assessments and monitoring, including front-line control testing and risk control self-assessments. Partnered with process owners to document controls, improve control language, and support control test scripting and evidence collection. Managed remediation planning by tracking corrective actions through completion and reporting risk analyses and mitigation recommendations. Supported data privacy work by maintaining enterprise privacy inventories and analyzing applicability of relevant privacy regulations for business applications and suppliers.