Senabelo Khulu
IT Audit And Specialized Assurance Consultant
Vorna Valley
Summary
A specialist in the IT & Specialized Assurance (ITSA) business area of Risk Advisory at Deloitte South Africa. Responsible for the delivery of cyber and technology assurance and advisory engagements in support of the financial audit team, and internal audit. With over 4 years of experience in Information technology assurance and advisory engagements encompassing IT Implementation Assurance, Risk & Controls and Governance, specifically with over 4 years as a consultant at SNG- GT and Deloitte South Africa performing IT Audit and related services. Client-Knowledge spans several industries including Manufacturing, Logistics & automotive, public sector & Banking, and finance.
Overview
4
4
years of professional experience
9
9
years of post-secondary education
Work History
ITSA (IT and Specialized Assurance) Consultant
Deloitte
Johannesburg
07.2022 - Current
- Joined Deloitte as Consultant in IT & Specialized Assurance (ITSA) Offering of Risk Advisory
- Duties/accomplishments: Analyze which risks can affect financial reporting and/or which IT risks can companies take more, to improve key business processes
- Execute IT risk management related assignments in various industries
- Analyze IT risks in relation to business processes and supporting IT
- Plan audit assignments based on key process and business risks identified and design audit program in line with risks and key IT application controls to be tested
- Execute audit field work in compliance with quality standards by following and completing prepared work programs
- Assess adequacy and effectiveness of governance, risk management practices and internal controls
- Evaluate IT areas such as information security, operations management, and disaster recovery procedures related to IT application controls to be reviewed
- Provide clear and sufficient audit evidence to support recommendations and audit opinion
- Express opinion based on results of work performed
- Identify opportunities to improve IT internal control environment and project management processes
- Identify and clearly articulate root cause of issues identified and impact thereof and recommend changes to business processes that will address IT and Project control weaknesses.
Cybersecurity Consultant
SNG-Grant thornton
Johannesburg
05.2020 - 06.2024
- Joined firm as trainee and promoted to consultant in 12 months
- Duties/accomplishments: Testing of ITGC and business processes in support of external and internal audit engagements
- Performing IT Security Review of networks (antivirus, vulnerability scanners, servers, and network devices in line with best practices
- E.g., CIS Critical Security Controls), databases and operating systems
- Performing Penetration Testing with following software (ZAP, Vega, NMAP, Nipper, Nessus, Fast path, OpenVAS, advanced IP Scanner) Application control reviews
- Create internal audit reports
- Gather threat intelligence on known vulnerability insights to socialize timeline for remediation plan based on CVSS risk scores
- Provide recommendations to subject matter experts and system owners for corrective actions.
Education
Graduate Degree in Computer science and informatics - Computer Science
University of Johannesburg (UJ)
Johannesburg 01.2016 - 12.2019
High School Diploma -
Lugobe High School (Matric)
Umbumbulu, South Africa 01.2009 - 12.2013
Skills
IT Audit Documentation
Internal and external audit
Incident management
Technical reviews
IT Governance Information Technology
Risk assessment
Application Control Quality Assurance
Information security
Sarbanes Oxley (SOX) controls
Application Control Reviews(ACR)
Data Analytics, Microsoft Office
Computer Assisted Audit
Project Control
IT General Control Reviews
Communication & Collaboration
Languages
English
Bilingual or Proficient (C2)
Zulu
Bilingual or Proficient (C2)
Timeline
ITSA (IT and Specialized Assurance) Consultant
Deloitte
07.2022 - Current
Cybersecurity Consultant
SNG-Grant thornton
05.2020 - 06.2024
Graduate Degree in Computer science and informatics - Computer Science
University of Johannesburg (UJ)
01.2016 - 12.2019
High School Diploma -
Lugobe High School (Matric)
01.2009 - 12.2013