Olufunmilayo Balogun

I’m an IT Internal Audit Manager with 14+ years delivering risk-based technology audits and technology risk assurance, covering IT General Controls (ITGC), IT Application Controls (ITAC), SOX compliance testing, and cybersecurity audits across banking, insurance, asset management, public sector, and other regulated environments.

Across the full internal audit lifecycle, I lead risk assessment, audit planning and scoping, fieldwork, workpaper documentation, and control testing. I validate issues, identify root causes, and present clear findings and control improvement recommendations to senior management and Audit Committees, while partnering with first and second line teams to strengthen governance and internal controls.

At Grant Thornton UK LLP, I planned and executed risk-based IT internal audits end-to-end, delivering approximately 25 technology audit, ITGC/ITAC, cyber risk, and control assurance engagements across UK financial services and regulated clients. I also developed an NCSC CAF-aligned cyber risk assessment methodology, supported information security policy frameworks aligned to ISO 27001 and NIST, and performed SOX IT controls testing including design and operating effectiveness assessments.

In my earlier roles in South Africa, I led multidisciplinary cybersecurity and technology assurance engagements, acted as the primary client contact, and translated technical results into actionable, risk-rated remediation priorities. I’ve conducted cybersecurity readiness and risk assessments using NIST CSF and ISO 27002, led vulnerability assessments and penetration testing, and supported data protection gap assessments (including NDPR/GDPR and POPIA readiness). I bring this blend of audit rigor and practical cyber governance to my current Principal Consultant work in IT Internal Audit, Technology Risk and Cyber Assurance.