Eku M.S. Bryant

Detail-oriented IT Auditor with over 2 years of experience in IT compliance, risk assessment, and control testing, including SOC 1, SOC 2, and SOX. Proficient in executing audit procedures, testing IT General and Application Controls, and evaluating security measures across systems. Possesses a CISA certification and strong analytical skills to identify deficiencies and recommend remediation.

IT Auditor - University of Maryland Children's Hospital - Baltimore

(2025-12)

• Execute audit procedures including the collection, review, and analysis of information, and the documentation of business processes and audit evidence.
• Conduct IT infrastructure control testing across applications, databases, servers, and operating systems to assess control design and identify gaps.
• Perform detailed testing of IT General Controls (ITGCs) and IT Application Controls (ITACs) to ensure adherence to the COSO framework and regulatory requirements.
• Orchestrate and participate throughout the audit lifecycle, encompassing planning, fieldwork, reporting, and follow-up activities.
• Facilitate kick-off meetings between external auditors, internal audit teams, and key stakeholders.
• Conduct application, process, and system walkthroughs to evaluate end-to end transactions and appraise control design effectiveness.
• Test controls related to Access Management, Change Management, and Backup and Recovery.
• Evaluate security controls pertinent to vulnerability management, incident management, business continuity, and network infrastructure.
• Validate both commercial-off-the-shelf (COTS) and internally developed applications.
• Identify control deficiencies and formulate recommendations for remediation.
• Perform IT risk assessments for newly implemented applications and pinpoint control gaps.
• Provide support for operational and enterprise project audits. Monitor and track remediation efforts and audit findings.

Governance, Risk & Compliance Analyst - Envoy Air

(2022-04 - 2024-09)

• Contributed to IT compliance programs, including SOX, SOC 1, SOC 2, and PCI DSS, through comprehensive planning, testing, monitoring, and reporting.
• Assisted with audit readiness and control testing for SOC 1 and SOC 2 examinations.
• Evaluated management's responses to control deficiencies and assessed the effectiveness of remediation actions.
• Recommended enhancements to fortify information security controls and processes.
• Collaborated with business units to ensure the timely remediation of identified control gaps.
• Supported the identification and testing of controls for new systems and automated processes.
• Ensured policies and procedures were reviewed and communicated according to established schedules.
• Partnered with IT Operations, Information Security, and Internal and External Audit teams to maintain compliance with all requirements.

Master's Program - Project Management - University of Maryland Global Campus

Certificate - Project Management Fundamentals - Anne Arundel Community College (2024-02 - 2024-04)

Bachelor of Business Administration - Management - Stella Maris Polytechnic (2001-09 - 2008-08)