Adrysha Govender

Experienced IT Audit and IT Risk professional with 15+ years in technology, audit, risk and governance, including experience across banking, professional services and retail environments. Strong background in IT General Controls (ITGC), application controls, IT risk management, governance, SAP access and role mapping, data analysis, audit planning and reporting. Known for a structured, analytical approach, sound judgement, effective stakeholder engagement, and the ability to translate control weaknesses and technology risks into practical improvement actions.

IT Systems Governance, Risk & Compliance Specialist | Reports to: Head of Department at Nedbank | Commercial & Retail Banking (2015-05 – Present)

• Provide IT governance, risk and control support across business and technology environments, working with stakeholders, specialists, and divisional representatives.
• Escalate and facilitate the management of technology risks that cannot be resolved at project or business-unit level.
• Assess governance, risk management practices and internal controls, identifying weaknesses, root causes, business impact and practical remediation actions.
• Plan audit assignments using key business and process risks, and design audit procedures aligned to IT application controls and the control environment.
• Evaluate information security, IT operations, disaster recovery and related technology controls, including links to business processes.
• Use data analytics to strengthen audit planning, improve fieldwork efficiency, and support evidence-based conclusions.
• Review risk profiles and operational risk reports for completeness, quality and alignment with required standards; provide recommendations for improvement.
• Support risk reporting, risk escalation, regulatory reporting, and implementation of risk management processes and tools.
• Monitor compliance with security policies, standards, and architecture, while supporting effective information and technology management practices.
• Engage with internal and external auditors and provide accurate, timely information to stakeholders.
• Identify opportunities to improve processes, systems, policies, and workflow efficiency, while maintaining awareness of legislative and industry developments.
• Work with SAP and internally developed systems, as well as Microsoft Office tools including Excel and Power BI.
• Managed SAP access enablement and user-to-role mapping across SAP Finance, VIM, Business Warehouse and Ariba platforms.
• Validated supporting documentation and monitored access changes for transferred and terminated employees, escalating required amendments or removals.
• Consolidated and validated mandate-update requests across SAP Finance, VIM and Ariba.
• Provided specialist support, knowledge transfer and guidance to business and cluster representatives on SAP authorizations, role mapping, and mandate changes.
• Reviewed access enablement against business processes and audit requirements and maintained supporting master data on SharePoint.
• Performed data analysis and supported IT audit and risk compliance activities, including SAP Business Planning and Consolidation (BPC) role mapping.

Senior Consultant / Supervisor – IT Audit | Reports to: Manager(s) at Deloitte | Chartered Accountants & Auditors (2014-08 – 2015-04)

• Led and executed IT risk, ITGC and application control reviews in accordance with approved audit methodology.
• Managed audit engagements from planning through fieldwork, review, reporting and follow-up, ensuring quality, timeliness and adherence to budget.
• Reviewed audit evidence and working papers, maintained audit programs, and supported the preparation of factual, well-substantiated reports.
• Managed client and internal stakeholder relationships, including engagement with Audit Partners and Managers.
• Supervised and coached junior staff, supporting skills development, knowledge transfer and team effectiveness.
• Performed data analysis using Excel and supported management reporting, WIP and budget reconciliations, presentations and ad hoc audit requests.

Senior Associate – IT Risk Assurance / IT Audit | Reports to: Manager(s) at Ernst & Young | Chartered Accountants & Auditors (2012-07 – 2014-07)

• Conducting comprehensive audits for IT systems, ensuring compliance with company and industry standards, and identifying areas of risk.
• Executed fieldwork for numerous IT audits across a portfolio of clients, improving overall efficiency and stakeholder satisfaction by 25%.
• Performed IT risk, ITGC, and application control reviews in line with approved audit methodology.
• Managed audit activities, including planning, fieldwork, evidence review, follow-up and reporting, with a focus on quality and timely delivery.
• Built and maintained effective client relationships and supported internal audit developments and knowledge-sharing initiatives.
• Supervised and trained junior staff and contributed to team management, project delivery and budget/WIP reconciliations.
• Performed data analysis using Excel and worked with MyClient and Microsoft Office.

Group Internal IT Auditor | Reports to: Senior Manager: Group Internal IT Auditor at Edcon | Retail Group (2011-03 – 2012-06)

• Conducting comprehensive audits for IT systems, ensuring compliance with company and industry standards, and identifying areas of risk.
• Contributing to the planning of the annual Audit Plan, Market Share Analysis, and preparation of working papers.
• Executed IT risk, ITGC and application control reviews as part of the approved annual audit plan.
• Supported annual audit planning, audit reporting, follow-up activities, and quality assurance.
• Performed market share analysis, reporting, staff training, and asset procurement activities.
• Worked with Ernst & Young external auditors on application control reviews and related assurance activities.
• Established working papers and internal audit schedules where no formal internal audit structures were previously in place.

IT Audit Consultant – Systems, Process & Data Management | Reports to: Manager(s) at PricewaterhouseCoopers (PwC) | Chartered Accountants & Auditors (2009-02 – 2011-02)

• Performed IT risk, ITGC and application control fieldwork in accordance with approved audit methodology.
• Prepared audit reports and completed follow-up activities.
• Provided on-the-job training to junior staff and maintained high-quality planning, fieldwork and reporting documentation in TeamMate.
• Led a team of 3 junior IT auditors that conducted an in-depth analysis of IT audit for the MTN Rwanda external audit
• Support for managers and senior managers
• Lead and participate in audit reviews delivering audit outputs, including final reports, within agreed timescales and in accordance with Internal Audit Standards. This entails:
• Conducting a preliminary survey of the area and processes under review
• to obtain a detailed understanding, in order to establish the scope of the audit. Key outputs of the planning phase include:
• Process summary and flowchart (Documenting the system / business processes); Risk assessment: Determining key risks and controls (manual and automated) relevant to the process;
• Audit program: Developed to test the adequacy of the control environment and
• Scope document: Detailing the work to be undertaken.
• Performing the audit fieldwork in terms of the audit program.
• Drafting the audit report, including the executive summary and detailed audit findings.
• Participate in internal departmental work and key standing tasks such as reporting to the relevant managers and supervisors, as requested.

TGIF Advisors | Financial Services Provider (2001-12 – 2006-01)

• Provided part-time administrative support within the insurance industry while completing tertiary studies.
• Processed and maintained insurance claims documentation and related records.
• Prepared and assisted with filing tax returns and supporting documentation.
• Handled ad hoc administrative queries and provided general administrative support as required.
• Vitality, Medical Aid, Gap Cover, Short-Term Insurance, Investments
• Record of Advice with Astute

Bachelor of Commerce in Information Systems and Technology, Business Management – University of Kwa-Zulu Natal (2006)

Business Development Certificate – Gordon Institute of Business Science (GIBS), KPMG (2008)

Core Banking & Financial Services – Regulatory Risk Learnership – Bank SETA / Nedbank (2017)