Summary
Overview
Work History
Education
Skills
Websites
Languages
Timeline
Generic

Senabelo Khulu

IT Audit And Specialized Assurance Consultant
Vorna Valley

Summary

A specialist in the IT & Specialized Assurance (ITSA) business area of Risk Advisory at Deloitte South Africa. Responsible for the delivery of cyber and technology assurance and advisory engagements in support of the financial audit team, and internal audit. With over 4 years of experience in Information technology assurance and advisory engagements encompassing IT Implementation Assurance, Risk & Controls and Governance, specifically with over 4 years as a consultant at SNG- GT and Deloitte South Africa performing IT Audit and related services. Client-Knowledge spans several industries including Manufacturing, Logistics & automotive, public sector & Banking, and finance.

Overview

4
4
years of professional experience
9
9
years of post-secondary education

Work History

ITSA (IT and Specialized Assurance) Consultant

Deloitte
Johannesburg
07.2022 - Current
  • Joined Deloitte as Consultant in IT & Specialized Assurance (ITSA) Offering of Risk Advisory
  • Duties/accomplishments: Analyze which risks can affect financial reporting and/or which IT risks can companies take more, to improve key business processes
  • Execute IT risk management related assignments in various industries
  • Analyze IT risks in relation to business processes and supporting IT
  • Plan audit assignments based on key process and business risks identified and design audit program in line with risks and key IT application controls to be tested
  • Execute audit field work in compliance with quality standards by following and completing prepared work programs
  • Assess adequacy and effectiveness of governance, risk management practices and internal controls
  • Evaluate IT areas such as information security, operations management, and disaster recovery procedures related to IT application controls to be reviewed
  • Provide clear and sufficient audit evidence to support recommendations and audit opinion
  • Express opinion based on results of work performed
  • Identify opportunities to improve IT internal control environment and project management processes
  • Identify and clearly articulate root cause of issues identified and impact thereof and recommend changes to business processes that will address IT and Project control weaknesses.

Cybersecurity Consultant

SNG-Grant thornton
Johannesburg
05.2020 - 06.2024
  • Joined firm as trainee and promoted to consultant in 12 months
  • Duties/accomplishments: Testing of ITGC and business processes in support of external and internal audit engagements
  • Performing IT Security Review of networks (antivirus, vulnerability scanners, servers, and network devices in line with best practices
  • E.g., CIS Critical Security Controls), databases and operating systems
  • Performing Penetration Testing with following software (ZAP, Vega, NMAP, Nipper, Nessus, Fast path, OpenVAS, advanced IP Scanner) Application control reviews
  • Create internal audit reports
  • Gather threat intelligence on known vulnerability insights to socialize timeline for remediation plan based on CVSS risk scores
  • Provide recommendations to subject matter experts and system owners for corrective actions.

Education

Graduate Degree in Computer science and informatics - Computer Science

University of Johannesburg (UJ)
Johannesburg
01.2016 - 12.2019

High School Diploma -

Lugobe High School (Matric)
Umbumbulu, South Africa
01.2009 - 12.2013

Skills

IT Audit Documentation

Languages

English
Bilingual or Proficient (C2)
Zulu
Bilingual or Proficient (C2)

Timeline

ITSA (IT and Specialized Assurance) Consultant

Deloitte
07.2022 - Current

Cybersecurity Consultant

SNG-Grant thornton
05.2020 - 06.2024

Graduate Degree in Computer science and informatics - Computer Science

University of Johannesburg (UJ)
01.2016 - 12.2019

High School Diploma -

Lugobe High School (Matric)
01.2009 - 12.2013
Senabelo KhuluIT Audit And Specialized Assurance Consultant