Nabasinga Joan Mirembe

Senior Associate

PwC Uganda

07.2022 - 08.2024

Performing information security reviews including IT general controls review, application-level controls reviews (access rights and segregation of duties controls, automated controls, interfaces, system reports testing, etc.) on various tiers of applications including core banking systems and billing systems; network security reviews, operating system security reviews, database security reviews etc.
Performing data analysis using ACL computer-aided audit tool (CAAT) for data integrity tests on journal entries into financial systems and data analytics for revenue assurance.
Testing of system-driven financial statement balances for accuracy, completeness, occurrences and cut-off financial assertions.
Performed document reviews of the relevant company documents to gain an understanding of the current control environment.
Performing ERP (SAP, Oracle, Navision) control reviews.
Carried out entry interviews and walkthroughs with business process owners at all levels of the organisations to determine relevance of the current key processes and controls in place.
Assessed the risk management process against the controls in place.
Reviewed and assessed the relevance of the current state of adequacy of the design of the key controls where management had indicated the controls were not working adequately.
Assessed the current documented business processes and controls including the various gaps and weaknesses identified from various reviews.
Performed operating effectiveness tests on key controls.
Conducted a kick-off meeting with the senior management of the client to re-introduce the BCM project.
Developed templates to capture recovery strategies/ options.
The template was designed to capture (for each resource category) the recovery options, requirements for the effective activation and operation of the recovery option, the RTO and RPO, the cost for deploying the recovery option (including the initial investment, human resource, maintenance, operational costs, legal and compliance, technology/ equipment costs), the benefits and the limitations.
Conducted physical workshops with the client to recap on the understanding of the business, discuss the results of the business impact analysis and to discuss possible strategies/options for recovery in the event of an incident which impacts each critical resource using the template developed and responding to every other information requirement in the template.
Documented the business continuity plan using the outcome of the identified recovery strategies/options.
Held meetings with the leadership team to discuss the business continuity plans and validate its content.
Understanding and documenting client's key business processes, underlying business applications and how it responds to IT risks.
Performing risk assessment including classifying identified risk based on likelihood of occurrence and magnitude and prioritising same.
Reviewing client's IT policies and procedures against industry best practices and standards (ISO 27001/27002, COBIT 5, ISF's SoGP).
Reviewing the client's IT governance structure, key business applications and infrastructures for compliance with standards and best practices.
Providing continuous and point in time quality assurance and project management services for various clientele system implementations.
Conducted a kick-off meeting with the senior management of the organisation to re-introduce the BCM project.
Assisted the client to develop a well-defined Business Continuity Policy clearly defining, formalising, communicating and giving direction to the way in which business continuity risks should be managed and mitigated.
Conducted physical workshops with the client to confirm our understanding of each directorate, identifying their business processes and the key risks to continued service delivery from their perspective, and to socialize our recommendations.
Based on the understanding of the organisation and findings from the workshops, we performed a Business Impact Analysis to identify all critical processes, services, systems, people, data and interdependencies across directorates, departments, units and divisions.
As part of the BIA, events which could impact the critical components and affect business continuity were identified and evaluated.
Recovery Point Objectives (RPOs) and Recovery Time Objectives (RTOs) to the critical processes were also defined.
Identified optimal and cost-efficient recovery strategies in close coordination with the Risk Management Unit based on the result of the BIA.

Associate

PwC Uganda

09.2021 - 06.2022

Performed monthly tax compliance, tax computations, tax auditing and health tax checks for clients.
Automated a tool using excel macros.
This tool helps in data manipulation and clean-up of the Work in Progress monthly data analysis for the firm.
Developed a Knowledge Management System using google sites.
This system is used by the internal members of the firm to enquire about all the tax related knowledge in the country and across East Africa.

Intern

PwC Uganda

05.2021 - 09.2021

Business analysis of the core banking systems such as Rubikon, Orbit-R-Core and Equinox/Equiweb software.
Analysed and administered these systems on behalf of the Banks that were our clients.

Intern

Bank of Uganda

06.2019 - 07.2019

Developed an e-commerce website for the Bank.
This website was to be used by all employees of the Bank to do online shopping amongst one another.
Did presentations for various prototypes of the website.

Summary

Overview

Work History

Senior Associate

Associate

Intern

Intern

Education

Masters - Business Informatics

Certificate - Azure Data Fundamentals

Certificate - Security, Compliance And Identity Fundamentals

Bachelor's degree - Information Technology and Computing

Skills

Languages

EXTRA-CURRICULAR ACTIVITIES

Personal Information

Timeline

Senior Associate

Associate

Intern

Intern

Masters - Business Informatics

Certificate - Azure Data Fundamentals

Certificate - Security, Compliance And Identity Fundamentals

Bachelor's degree - Information Technology and Computing

Similar Profiles

Bikahdoh RobertBikahdoh Robert

Azidah MwanjaAzidah Mwanja

James KINYERAJames KINYERA

László SzilvásiLászló Szilvási

Gábor BereczkiGábor Bereczki