# Sulaiman Baruwa

Sulaiman Baruwa is a remote worker on Himalayas, Specialist II, Governance, Risk and Compliance at Concentrix, based in Germany.

Source: https://himalayas.app/@sulaimanbaruwa

```text
I lead IT audit, technology risk, security compliance, and GRC programs.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | Germany |
| Authorized to work in | Germany |
| Salary expectations | 94k+ EUR |
| Job categories | It Auditor, Senior Governance Risk And Compliance Specialist, Technology Risk Analyst, Information Security Compliance Manager, IT Risk Manager, Program Manager |
| Skills | IT Audit, Technology Risk, Governance Risk And Compliance, Security Compliance, Information Systems Audit, Internal Controls, SOX, IT General Controls, IT Application Controls, Entity Level Control Testing, Risk Assessment, Risk Mitigation, Control Self Assessment, Information Assurance, Security Audits, Security Assessments, Control Testing, ISO 27001, ISMS, NIST Cybersecurity Framework, NIST SP 800 53, NIST 800 53, COBIT 5, COSO, CIS Controls, PCI DSS, HIPAA, SOC2, SOC 3, CSA Cloud Control Matrix, Data Protection, Privacy By Design, Access Management, Disaster Recovery, Business Continuity, Vulnerability Management, Third Party Risk Management, Enterprise Risk Management, Fraud Management, Audit Planning, Audit Execution, Audit documentation, Attestation Review, IT Contracting, Service Level Agreements, KPI Setting, Project Management, Program Management, Agile Project Management, CMMI, Confluence, AuditBoard, Microsoft Word, Excel, PowerPoint, Jira, Vanta, ServiceNow GRC, Active Directory, KnowBe4, Archer, Nessus, Qualys, AWS Inspector, CIS CAT Lite, CIS CAT Pro, ManageEngine, Ideas, ACLs, Alteryx |

## What I'm looking for

```text
I'm looking to help organizations strengthen IT controls, security compliance, audit readiness, and risk management while leading collaborative teams through complex regulatory and security challenges.
```

## About

```text
I'm currently leading Governance, Risk and Compliance work at Concentrix in Berlin, where I drive IT and contractual compliance, control testing, fraud prevention, risk reporting, and audit readiness.

Previously at HSBC, I supported SOX IT internal audit reviews, evidence gathering, compliance assessments, control-owner guidance, and financial-reporting risk and control documentation.

Across Lint Technologies and Motormata, I've delivered ITGC, ELC, ITAC, ISO 27001, SOC 2, PCI DSS, NIST, third-party risk, disaster recovery, and business continuity engagements for financial-services clients. I bring more than eight years of experience helping organizations identify control gaps, strengthen security programs, and manage risk.
```

## Experience

### Specialist II, Governance, Risk and Compliance (current)

[Concentrix](https://himalayas.app/companies/concentrix). Apr 2024 - Present

```text
Performs risk assessments, leads IT and contractual compliance implementation, and manages fraud prevention efforts. Ensures audit readiness and develops risk reports for stakeholders.
```

Skills: Risk-Assessment, Compliance, Fraud-Management, Audit-Readiness, GRC, Stakeholder-Management

### Regulatory Reporting Analyst

[HSBC](https://himalayas.app/companies/hsbc). Sep 2021 - Mar 2024

```text
Maintains detailed transaction records, evaluates compliance checklists, and supports SOX IT internal audit reviews. Documents IT policies and provides evidence for audits via GRC tools.
```

Skills: Regulatory-Reporting, Compliance, SOX, IT-Audit, GRC, Risk-Management

### Senior Consultant, IT Audit, Risk & GRC

Lint Technologies. Jul 2017 - Aug 2021

```text
Conducted information control reviews and guided ISO 27001 implementation for clients. Evaluated gaps across security frameworks and supported ERM and third-party risk management engagements.
```

Skills: IT-Audit, ISO-27001, NIST, CIS, SOC2, PCI-DSS, Risk-Management, GRC, ITGC, ITAC

### Experienced Analyst, IT Audit & Risk

Lint Technologies. May 2015 - Jul 2017

```text
Supported senior team members during audits of banking, insurance, and telecommunications clients. Performed controls testing, developed risk models, and assisted with ISO 27001 readiness assessments.
```

Skills: IT-Audit, Risk-Management, SOX, ITGC, Vulnerability-Management, ISO-27001, CMMI, BCP

### Program Coordinator (PMO Analyst), Technology Risk

Motormata. Nov 2013 - Apr 2015

```text
Executed month-end procedures, performed financial analysis, and ensured compliance with cash processing procedures. Collaborated with teams to identify growth opportunities and delivered KPIs.
```

Skills: Financial-Analysis, Compliance, Risk-Management, KPI-Reporting, Data-Aggregation

## Education

### Fountain University Osogbo

Bachelor of Science, Economics

```text
Earned a Bachelor of Science in Economics from Fountain University Osogbo.
```

### Ruhr University Bochum

Master of Science, Economics

```text
Pursued a Master of Science in Economics at Ruhr University Bochum.
```

## Tech stack

- Jira
- Confluence
- Qualys
- Microsoft Excel
- Vanta
- AuditBoard
- Microsoft Word
- Microsoft PowerPoint

To contact Sulaiman, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Muyideen Lawal](https://himalayas.app/@muyideenlawal): Information Security Auditor, SWIFTCERTIFY
- [Sudhanshu Bisht](https://himalayas.app/@sudhanshubisht): Information Security Consultant, de dsb GmbH
- [Patricia Hernandez](https://himalayas.app/@nicolehp): Governance, Risk & Compliance Analyst, Schneider Electric
- [Nagateja vattikuti](https://himalayas.app/@nagatejavattikuti): Team Manager Internal Audit, Cognizant Technology Solutions
- [Franklin Njoku](https://himalayas.app/@franklinnjoku): Specialist II, GRC & IT Audit, Amdari
- [Nikita Joshi](https://himalayas.app/@nikitajoshi2): Junior IT GRC Specialist, Epay transact Zahlungssysteme GmbH
- [Maryam X](https://himalayas.app/@maryamx): Information Security & Compliance Lead, Fehthealth Telemedicine Platform
- [Matheus Augusto Tini Pereira](https://himalayas.app/@matheusaugustotinipe): Risk & Compliance Assistant Manager, KPMG AG
- [Oldair Barbosa](https://himalayas.app/@oldairbarbosa): Technical Information Security Officer, Deutsche Bank AG
- [Pranjal Sharma](https://himalayas.app/@pranjalsharma1): Information Security Consultant, Cybersecurity and Business Advisory