Kemi User

I’m an IT Audit and Compliance professional with 5 years of experience turning complex control environments into clean, audit-ready programs across regulated financial institutions and fast-moving SaaS companies. I convert IT risk exposure into controlled, documented, and defensible SOX 404 compliance programs—eliminating control gaps at the source, keeping audit cycles on schedule, and delivering findings leadership can act on without a second round of questions.

From risk scoping and control design through evidence management, deficiency remediation, and audit close, I apply COSO and COBIT as working audit tools backed by direct AuditBoard execution experience. I perform SOX ITGC testing across logical access, change management, and computer operations domains, and I support cloud control assessments on AWS.

In my current role, I execute end-to-end ITGC walkthroughs across six in-scope systems and coordinate with Big 4 external auditors to align evidence packages and close open items ahead of schedule. I’ve delivered three consecutive SOX 404 testing cycles with zero material weaknesses reported, built and maintained a 40+ control risk and control matrix in AuditBoard, and helped remediate a privileged access recertification gap within a single quarter. My audit reports consistently earn first-review sign-off from the CISO down, backed by a track record of zero material weaknesses across consecutive audit cycles.