Open to opportunities

Enoch Kwaku Amegatse

@enochkwakuamegatse

Message

Detail-oriented IT Audit and Compliance Analyst with cybersecurity expertise.

Ghana

Message

What I'm looking for

I am looking for a role that fosters growth, collaboration, and innovation in compliance and cybersecurity.

I am a detail-oriented IT Audit and Compliance Analyst with a strong foundation in computer science and hands-on experience in cybersecurity, risk assessment, and regulatory compliance. My expertise lies in conducting internal audits, evaluating IT controls, and ensuring alignment with industry frameworks such as NIST, ISO 27001, COBIT 5, PCI DSS, and GDPR. I am adept at identifying control gaps, testing security protocols, and driving remediation efforts to improve organizational risk posture.

Throughout my career, I have successfully conducted IT audits to evaluate the effectiveness of internal controls and governance processes. I have collaborated with cross-functional teams to support remediation efforts and strengthen control environments. My analytical thinking and attention to detail have enabled me to document audit procedures and findings effectively, ensuring compliance with regulatory standards. I am passionate about leveraging my skills in Python and data analysis to enhance compliance initiatives and contribute to organizational success.

Experience

Work history, roles, and key accomplishments

Current

IT Auditor

Current

Infosec Consulting

Oct 2021 - Present (4 years 2 months)

Conducted IT audits to evaluate the effectiveness of internal controls, risk management, and governance processes, assessing IT General Controls (ITGC) across various IT domains. Identified control gaps, vulnerabilities, and weaknesses, providing actionable recommendations to mitigate risks and enhance security posture while ensuring compliance with industry frameworks.

IT Audit ITGC Risk Management ISO 27001 NIST 800 53 PCI DSS SOX

Compliance and Security Analyst

Prudential Life Insurance Company

Jun 2015 - Sep 2021 (6 years 3 months)

Monitored and enforced compliance with regulatory standards such as HIPAA, GDPR, SOX, PCI DSS, and ISO 27001, conducting regular security assessments and internal audits. Developed, updated, and enforced security policies and procedures, while also investigating and responding to security incidents and data breaches.

Compliance HIPAA GDPR SOX PCI DSS ISO 27001 Vendor Risk Management Security Policies Incident Response

Account Officer

Step-Mill Consult

May 2014 - Aug 2015 (1 year 3 months)

Negotiated contracts and maintained day-to-day account records, processing payments and expenditures. Managed the impress system for field workers and handled various administrative tasks assigned by the CEO.

Contract Negotiation Account Reconciliation Payment Processing

Data Entry Officer

Innovations for Poverty Action (IPA)

Sep 2012 - Mar 2014 (1 year 6 months)

Entered data for various projects including TCAI, EPAME, and Hunger Project, ensuring accuracy and consistency. Performed reconciliation of different projects to facilitate uniform decision-making.

Data Entry Database Management Microsoft Excel

Supporting Account Officer

VMobile Company Limited

Jul 2009 - Nov 2009 (4 months)

Passed journal entries and prepared Bank Reconciliation Statements, ensuring accurate accounting records for balance sheet accounts using Tally accounting software. Maintained an efficient filing system and performed other duties assigned by the Finance Manager.

Journal Entry Bank Reconciliation Tally Financial Reporting Account Reconciliation

Education

Degrees, certifications, and relevant coursework

Accra Technical University

HND, Accounting

Completed a Higher National Diploma in Accounting, gaining a strong foundation in financial principles and practices. Developed skills in general ledger management, financial reporting, and budget reconciliation.

Yesyoucan Cybersecure LLC

Certification, Cybersecurity GRC - IT Audit

Activities and societies: Focus: Cybersecurity Fundamentals, Governance, Risk, and Compliance (GRC) Frameworks, IT Audit Principles and Practices, Policy and Procedure Review, SOX Compliance (Testing of ITGC Controls), SOX Reporting, Risk Assessment, Hashing and Encryption Testing, PCI DSS Compliance, Third-Party Risk Management, Risk Management Framework, Data Security, Privacy, and AI, Vulnerability Management (Using Tenable Nessus).

Completed comprehensive training in Cybersecurity GRC and IT Audit, focusing on governance, risk, and compliance frameworks. Gained expertise in IT audit principles, SOX compliance, risk assessment, and data security.