Luthando Chuene

Technology Risk Assurance Manager with over 6 years of experience delivering IT Audit, Cybersecurity Risk, Technology Controls and Governance engagements across large enterprise environments. Experienced in designing and assessing Risk & Control Matrices (RCMs), evaluating IT General Controls (ITGCs), performing Cybersecurity Risk Assessments and advising executive stakeholders on strengthening technology control environments. Skilled in applying COBIT, ISO 27001, NIST and SOX principles to improve governance, risk management and regulatory compliance.

Certified Information Systems

Auditor (CISA) and ISC2 Certified in Cybersecurity (CC).

IT Risk Assurance Manager at PricewaterhouseCoopers (2023-01 – Present)

• Lead the delivery of risk assurance, technology risk, and project assurance engagements on time and within budget, while maintaining high-quality standards, identifying emerging risks, and enhancing client satisfaction
• Report on assurance findings, root causes, mitigating controls, and conclusions to management, the Board Risk Committee, and the Executive IT Committee
• Assess and communicate the overall effectiveness of IT governance, cybersecurity governance, risk management, and internal control frameworks, identifying emerging technology and cyber risks, control deficiencies, and opportunities for improvement
• Developed and implemented Risk and Control Matrices, providing detailed reporting on the efficacy of technology controls and the remediation of identified gaps
• Build and maintain strategic relationships with senior stakeholders across functions
• Collaborate with cross-functional teams to address control gaps, technology and cyber risks, operational risks, and remediation plans
• Mentor, coach, and support junior and trainee associates, fostering technical excellence, professional development, and high-quality engagement delivery
• Drive engagement efficiency by integrating data analytics, process automation and visual dashboards for executive visibility

IT Risk Assurance Senior Associate at PricewaterhouseCoopers (2022-01 – 2022-12)

• Supported management in risk identification, controls testing, and engagement scoping
• Facilitated engagement kick-off and close-out meetings to align expectations and communicate outcomes
• Performed and supervised risk-based assessments of technology controls, including User Access Management, Privileged Access Management, Change Management, and Information Security controls, identifying control weaknesses and supporting management in mitigating technology and cyber risks
• Managed engagement with key client stakeholders throughout the engagement lifecycle
• Identified control, technology, and process risks, recommending practical remediation actions to strengthen the control environment
• Drafted findings and recommendations for inclusion in final reports
• Coached junior associates and reviewed their deliverables for quality assurance

IT Risk Assurance Associate at PricewaterhouseCoopers (2020-01 – 2021-12)

• Examined and evaluated the design and operating effectiveness of IT General Controls (ITGCs), including User Access Management, Privileged Access Management, Change Management, and Information Security controls, as well as Application Controls and system-generated information
• Executed risk-based assurance reviews in accordance with approved methodologies, quality standards, and regulatory requirements
• Ensured evidence was accurate, valid, and comprehensive prior to review and reporting
• Prepared system descriptions, walkthroughs, process flows, and test procedures to support findings
• Built and maintained strong relationships with process owners and key stakeholders to enable collaborative
• Performed data cleansing and developed workflows to automate ITGC testing using Alteryx, with results visualized through Power BI dashboards

Candidate Technician at ArcelorMittal South Africa (2019-05 – 2019-12)

• Developed and implemented Manufacturing Execution Systems (MES) software solutions
• Investigated and resolved system errors; supported ongoing system maintenance
• Provided technical support across business units for software systems
• Coordinated software development projects and prepared technical documentation
• Configured computers and mobile devices for business system integration

Learner Technician at ArcelorMittal South Africa (2018-02 – 2019-04)

In-service Training

• Completed in-service training with a focus on software development and production support in a live manufacturing environment

Bachelor's Degree of Computing in Computing – Belgium Campus