Looking for a job

Amanaghawon Aikoriogie

@amanaghawonaikoriogi

Senior IT auditor at Acuity Insurance who built its MAR ITGC program and identified 150+ excessive admin access assignments.

United States

Message

At Acuity Insurance, I built the MAR ITGC program from the ground up, documenting 56 control entries aligned with NIST CSF. I also established the testing methodology and control ownership requirements.

I tested access and change management controls, identified more than 150 excessive administrator access assignments, and worked with control owners to remove unnecessary privileges and validate remediation. I also consolidated 32 IT and information security policies into 18.

Previously, at ProPharma Group, I built the SOX 404 IT compliance program for a post-IPO biotechnology client and led IT controls validation; the client's full SOX 404 audit concluded with zero findings. I hold CISA and CISM certifications and have worked across SOX 404, MAR, ITGC testing, and information security compliance.

Experience

Work history, roles, and key accomplishments

Current

Information Security Compliance Analyst, GRC

Current

Acuity Insurance

Mar 2025 - Present (1 year 8 months)

Built Acuity's MAR ITGC program from the ground up, developing a risk and control matrix with 56 documented control entries aligned with NIST CSF. Tested design and operating effectiveness of access and change management controls, identified excessive administrator access, and consolidated 32 policies into 18.

MARs ITGC NIST CSF Risk And Control Matrices Access Management Change Management Backup And Recovery Batch Processing job scheduling ServiceNow GRC Policy Consolidation Executive Dashboards Access Reviews Pentest Management

IT Audit and Compliance Specialist, Internal Controls

American Tire Distributors

May 2022 - Feb 2025 (2 years 9 months)

Planned and executed quarterly SOX 404 ITGC testing across approximately 30 control tests spanning access management, change management, and IT operations. Introduced monthly termination testing to address recurring access removal failures and developed internal control KPIs and management reports.

SOX 404 ITGC Access Management Change Management IT Operations Privileged Access Provisioning Password Policies Backup Batch Job Monitoring Walkthroughs Risk Assessment Sampling IPE Working Papers PBC KPIs Management Reporting

Consultant, IT Compliance and SOX Validation Lead

ProPharma Group

Jan 2020 - May 2022 (2 years 4 months)

Built the SOX 404 IT compliance program from the ground up for a post-IPO biotechnology client, developing the IT control framework, risk and control matrices, sampling methodology, and testing standards. Led ITGC and automated control validation, and the client's full SOX 404 audit concluded with zero findings.

SOX 404 ITGC ITAC Access Management Change Management IT Operations Backup And Recovery job scheduling Risk And Control Matrices Sampling HIPAA Third Party Risk OneTrust SOC 1 SOC2 Risk Register Corrective Actions

IT Risk and Assurance Specialist

First Bank

Jan 2016 - Oct 2016 (9 months)

Performed IT risk assessments and internal audit procedures, reviewing user access controls, password practices, and compliance with information security requirements. Documented control gaps and recommended corrective actions, preparing risk and audit reports.

IT Risk Management Internal Audit User Access Control Password Best Practices Information Security Compliance Control Gap Analysis Risk Reporting Audit Reporting