KWAME AMISSAH

• Lead end-to-end information security and IT assurance engagements for financial and fintech clients, covering ISO standards and PCI DSS. • Design and executed risk-based audit strategies that identified control gaps and strengthened IT governance and risk posture. • Guide organizations through successful audit readiness and certification processes, aligning controls with international standards. • Deliver strategic information security insights to executive stakeholders, translating complex audit findings into actionable improvements. • Conduct comprehensive assessments in information security, IT, and business continuity, enhancing system reliability.

Skills: Identity and Access Management (IAM) · Access Control · Risk Assessment · ISO 22301 · Systems Audit · Application Controls · ISO 27001 · IT Audit · Cybersecurity · Document Review · Information System Audit · Infrastructure Security · Risk Management · Information Security Implementation · Policy Framework Implementation

Skills: Access Control · Risk Assessment · Systems Audit · ISO 27001 · IT Audit · Cybersecurity · Document Review · Information System Audit · Infrastructure Security · Risk Management

1. Led applications control audit of the bank's core banking application, T24, to identify control weaknesses and vulnerabilities, ensuring financial security and regulatory compliance. 2. Conducted ISO 27001 audits to assess information security, cybersecurity, and privacy protection standards, ensuring data integrity, confidentiality, and availability. 3. Monitored, reviewed, and evaluated user activities in T24 to ensure compliance with Identity & Access Management requirements and SoD matrix. 4. Executed PCI DSS audit to assure protection of customers' cardholder data and compliance with industry standards. 5. Conducted IT audits to assess compliance with company policies, regulatory directives, and industry standards, ensuring operational efficiency and risk mitigation. Quality Assurance Team: As a Quality Assurance team member for the core banking application upgrade (T24), I actively contribute in the following ways: 1. Reviewed test scripts for each department during the analysis phase of the core banking application upgrade. 2. Participated in meetings with vendors to assess the quality of various banking applications and ensure they align with our business goals. 3. Assisted in formulating the data migration strategy and processes from the legacy system to the new core banking application, T24.

1. Coordinated with system administrators to schedule and apply patches in a timely manner, addressing critical vulnerabilities promptly. 2. Documented patching processes and maintained records to demonstrate compliance with security policies and regulatory requirements. 3. Monitored endpoint security logs and alerts, responding to potential security threats such as malware infections and unauthorized access attempts. 4. Conducted periodic access reviews and audits to ensure user accounts are appropriately configured and permissions align with job responsibilities.