Rispher Njema

Led risk-based technology audits across cybersecurity, operational resilience, data privacy, third-party risk and technology transformation in a regulated banking environment. Managed end-to-end audits, assessed GDPR, DORA and MaRisk compliance, validated remediation, applied AI-driven analytics, evaluated resilience and technology controls, and engaged senior stakeholders to strengthen governance, risk management, regulatory readiness and control effectiveness.

Delivered technology risk, IT audit and cybersecurity engagements for financial institutions, trading firms and insurers across North America and the Caribbean. Performed ITGC, FAIT, PCAOB, SOC 1 and SOC 2 assessments, evaluated cybersecurity and privacy controls, supported GDPR, ISO 27001 and ISO 27701 compliance, leveraged EY.ai and data analytics, and strengthened governance, risk management and regulatory compliance.

Performed technology risk, ITGC and cybersecurity audits across financial services, telecoms and corporate sectors. Assessed compliance with CBK ICT Risk Guidelines, GDPR and data protection requirements, evaluated access, change and security controls, conducted control testing, applied Alteryx, DataSnipper and Excel analytics, and supported remediation, governance improvements, stakeholder reporting and regulatory assurance engagements.