Andrew Osagie

CISA-certified IT audit and technology risk professional who plans and executes audits over IT general controls, application controls, and SOX/ICFR, SOC 1, and SOC 2 engagements across ERP and cloud environments. Skilled at conducting control walkthroughs, testing design and operating effectiveness, and translating control gaps into clear, actionable remediation for business and technical stakeholders. Grounded in COBIT, NIST CSF, and ISO 27001, with disciplined evidence documentation and strong stakeholder collaboration across Agile and Waterfall environments.

Technology Risk Consultant at KPMG Canada (2026-01 – Present)

• Plan and execute IT audits over IT general controls — change management, logical access, computer operations, and SDLC — supporting SOX/ICFR, SOC 1, and SOC 2 engagements across ERP and cloud platforms.
• Conduct control walkthroughs with process and control owners to evaluate design and operating effectiveness; document narratives, flowcharts, and risk-and-control matrices.
• Perform tests of design and operating effectiveness, including sample selection, evidence evaluation, and follow-up on exceptions and deviations.
• Test logical access and segregation-of-duties controls, user provisioning and deprovisioning, and privileged access across identity and ERP platforms.
• Assess change and release management controls over configuration and code changes, validating authorization, testing, and approval evidence.
• Identify and evaluate control deficiencies, quantify potential impact, and communicate findings and remediation recommendations to client and engagement leadership.
• Maintain audit-ready workpapers aligned to COBIT, NIST CSF, and ISO 27001, ensuring completeness and reviewer-ready documentation.

Production Artist at Brooks Creative House (2023-04 – 2026-01)

• Managed multiple concurrent projects to defined quality standards, deadlines, and specifications across print and digital deliverables.
• Performed quality assurance reviews on high-volume output, identifying defects and reducing rework and downstream errors.
• Tracked change requests and maintained version control across the production lifecycle, ensuring traceability and accuracy.
• Documented workflows and drove process improvements that streamlined coordination and turnaround times.
• Coordinated cross-functional stakeholders using Asana, Microsoft Teams, and Excel for reporting and project tracking.

IT Compliance Analyst at Unitellas International Limited (2018-01 – 2022-08)

• Supported IT risk, governance, and compliance activities for enterprise cloud infrastructure.
• Performed logical access reviews, privileged account assessments, and periodic user access recertification.
• Assisted with IT risk assessments, internal control evaluations, and compliance reviews.
• Supported ISO 27001 and SOC 2 initiatives through control evidence collection and remediation tracking.
• Worked with Azure Active Directory, LDAP, and cloud infrastructure controls to advance security and compliance objectives.
• Prepared compliance documentation and partnered with technical teams to address and close audit findings.

Diploma in Health Information Management – triOS College

Post-Graduate Certificate in Health Informatics – Sault College

Bachelor of Science (B.Sc.) in Physiology