Isaac Newton - Bank Payment System Profile April 2009

1. Name of Staff: Isaac Newton Onyango 2. Nationality: Kenyan 3. Membership in Professional Societies: • Information Systems Audit and Control Association (ISACA) 4. Key Relevant Experience Detailed Tasks Assigned Payment Systems Specialist • Ongoing client communication • Planning • Technical review of the system • Presentation of report to senior management

Work Undertaken that Best Illustrates Capability to Handle the Tasks Assigned Name of assignment or project: Electronic Payment Systems Review Year: 2005 Location: Johannesburg, South Africa Client: Net 1 Applied Technologies South Africa Limited Main project features: • Risk and control review of biometric card payment systems used by the Government of South Africa to make payments to pensioners via ATM or Point of Sale Positions held: Project Manager Activities performed: • Client liaison • Assignment planning • Quality review Name of assignment or project: Internal and External Penetration Testing Year: 2008 Location: Nairobi, Kenya Client: Co-operative Bank of Kenya Limited Main project features: • Internal and External Vulnerability Assessment of the Internet Banking environment • Data collection exercise in preparation for PCI Audit Positions held: Project Manager Activities performed: • Client liaison including presentations to the Internet Banking Steering Committee • Assignment planning • Quality review

Detailed Tasks Assigned

Work Undertaken that Best Illustrates Capability to Handle the Tasks Assigned Name of assignment or project: Automated Clearing House Risk Assessment Year: 2005 Location: Johannesburg, South Africa Client: Bankserv SA Main project features: • Performed a risk assessment review of South Africa’s automated clearing house system and developed an audit plan. Positions held: Lead Consultant Activities performed: •

Assignment planning

•

Risk assessment

•

Quality review

•

Reporting of issues to management

Name of assignment or project: Electronic Payment Systems Review Year: 2005 Location: Durban, South Africa Client: Moreland Developments Limited SA Main project features: • Review of controls around the Financial Management Systems electronic payment systems, interfaces and communication between Moreland and its bankers Positions held: Lead Consultant Activities performed: • Assignment planning •

Review of controls

•

Quality review

•

Reporting of issues to management

Name of assignment or project: Banking Applications Review Year: 2005 Location: Durban, South Africa. Client: Ithala Development Finance Corporation Main project features: • Applications review for core banking application, debit card system and clearing system Positions held: Project Manager Activities performed: • Client liaison • Assignment planning • Quality review

5. Education: Institution

Degree(s) or Diploma(s) obtained:

Strathmore Business School

Pursuing MBA

Information Systems Audit and Control Association (2001)

Certified Information Systems Auditor (CISA) – 2001 World Top Score

University of Nairobi (1994 – 1998)

Bachelor of Science, Computer Science – First Class Honors

Kenya Accountants and Secretaries Examination Board (1993 – 1996).

Certified Public Accountant of Kenya, CPA Finalist

6. Other Training: • COBIT Training • Project Management Methodology • Information Systems Security • Data Analysis using ACL • Data Analysis using IDEA • Application Systems Auditing 7. Employment Record: Period

Employer

Positions held

05/2006 – date

Discern Limited, Kenya

Director

03/2008 – 09/2008

Deloitte, Eastern Africa

Senior Manager, Enterprise Risk Services

02/2005 – 04/2006

KPMG, South Africa

IS Audit Manager

10/2003 – 01/2005

KPMG, East Africa

IS Audit Manager

10/2000 – 09/2003

KPMG, Kenya

IS Audit Consultant

09/1999 – 09/2000

KPMG, Kenya

Audit Semi-Senior

06/1996 – 12/2004

Strathmore University

Part-Time Lecturer on IT and Certified Information Systems Auditing