i
isidasilva

Isidoro

@isidasilva

Cybersecurity and IT Audit Consultant, VAPT and ISO 27001

Moçambique
Inglês, Português
Algumas informações são exibidas no idioma inglês.
Sobre mim
IT auditor and cybersecurity consultant with 10+ years in banking and financial services. I help businesses find and fix security weaknesses before attackers or auditors do: vulnerability assessments (Nessus, Qualys, Burp Suite), web application security testing, ISO 27001 and Cyber Essentials readiness, security policies and clear, executive-ready reports. Former Acting Head of Information Risk at Absa; I now lead ITGC and security control reviews for banks, a central bank and mobile-money operators. English and Portuguese. All testing only with your written authorisation.... Saiba mais

Habilidades

i
isidasilva
Isidoro
offline • 
Tempo médio de resposta: 1 hora

Conheça meus serviços

Gerenciamento de Risco
I will do internal audit risk control documentation
A partir deUS$ 55 /projetoMais detalhes
Segurança
I will do a website vulnerability assessment with a security report
A partir deUS$ 60 /projetoMais detalhes

Experiência profissional

Forvis_Mazars

IT Consultant and Auditor

Forvis Mazars

Jan 2024 - Present • 2 yrs 9 mos

Lead ITGC and ITAC assessments and security control reviews for regulated clients including the central bank, M-Pesa and commercial banks: logical access, change management, privileged accounts, segregation of duties, backup and recovery. Build automated SQL/Excel/VBA testing tools and present findings to IT leadership. Supervise two audit assistants.

Absa_Bank

Information Risk Officer (Acting Head of Information Risk)

Absa Bank

Jan 2014 - Dec 2018 • 4 yrs 11 mos

Acting Head of Information Risk (2015-2017): chaired the Change Advisory Board, drove closure of audit findings and evaluated infrastructure and application controls against regulation. Earlier ran large-scale user access recertifications and toxic-combination analysis as Logical Access Management Officer. Later managed the RPA, SharePoint and mobile solution teams in digital transformation, cutting paper-based processes by 75%, and prepared the IT disaster recovery plan.