The best way to accomplish great things is to simply begin. Taking the first step creates momentum, builds confidence, and turns ideas into progress and meaningful results.
I am a Chartered Accountant with a Master of Business Administration degree from Heriot-Watt University. I am also a Lead Auditor certified by MSECB for ISO 27001 LA/LI and have supported organizations in achieving information security compliance.
My work focuses on improving organizational processes, strengthening internal controls, and promoting accountability within organizations. I continue to expand my knowledge and experience in auditing, information security, and compliance. I am committed to delivering high-quality work while maintaining professionalism and integrity in every responsibility entrusted to me.
Professional Experience
With over 20 years of experience in the auditing industry, I have conducted over 150 audits across various sectors including manufacturing, mining, IT and the public sector. I have worked with multinational companies of all sizes and the public sector currently to enable them to strengthen their internal controls, and to ensure compliance with regulations and international standards.
I am an experienced Internal Audit and Governance professional with practical knowledge in risk management, internal controls, compliance reviews, and information security auditing. Over the years, I have participated in audits across finance, operations, procurement, payroll, accountable imprest, and IT environments. My work has included reviewing controls, assessing compliance with organizational policies and regulatory requirements, and identifying areas for operational improvement.
I have also been involved in information security management systems and auditing activities related to ISO 27001, including control assessments, policy reviews, business continuity planning, disaster recovery processes, endpoint security, and physical security controls. I am experienced in preparing audit findings, conducting risk assessments, documenting observations, and communicating recommendations to management in a clear and professional manner.
In addition, I have an interest in governance, risk, and compliance (GRC) practices and continuously seek opportunities to strengthen my expertise through professional development and training. I am committed to integrity, objectivity, continuous improvement, and ensuring organizations in achieving effective governance and operational excellence.
One of the most significant accomplishments in auditing was leading to the implementation of a risk-based audit approach that improved efficiency and audit coverage. I have also completed audits on schedule, implementing the risk management framework and providing valuable recommendations for improvements, supported by efficient communication and leadership skills.
One of my key achievements has been contributing to strengthening internal controls and compliance processes within organizational operations. Through participation in internal audit engagements, I have enabled the identification of control weaknesses, process gaps, and compliance issues across finance, procurement, payroll, and operational activities. My recommendations have helped management improve accountability, enhance operational efficiency, and reduce organizational risk exposure.
I have also contributed to information security and compliance initiatives related to ISO 27001 by supporting reviews of security controls, policies, endpoint protection, business continuity arrangements, and disaster recovery processes. Additionally, I have developed skills in preparing clear audit reports, documenting findings, and engaging stakeholders professionally during audit assignments. These experiences have strengthened my analytical abilities, attention to detail, and commitment to continuous improvement and effective governance practices.
Jessie Addico experience in auditing
During a recent ISO 27001 surveillance audit, the client representative responsible for providing key documentation went on leave during the implementation process. This created a challenge in obtaining the required evidence within the planned timeline. To address the situation, I addressed the audit requirements and agreed timelines. Through professional engagement and coordination, I secured the necessary support and cooperation from relevant personnel, enabling the successful completion of the audit assignment on schedule.
I appreciate the structured nature of certification audits, as standards provide a clear framework, though every audit is unique. I enjoy seeing how organizations interpret and implement requirements, and how small process improvements can have a meaningful impact over time.
My favorite part of auditing is identifying opportunities for improvement and ensuring organizations strengthen their processes and controls. I enjoy analyzing operations, assessing risks, and providing practical recommendations that enable support for efficiency, compliance, and accountability. Auditing allows me to continuously learn about different business functions, systems, and regulatory requirements. I particularly appreciate the problem-solving aspect of audit work and the value it brings in improving governance, risk management, and operational effectiveness.
My future goal is to continue developing my expertise in internal auditing, governance, risk management, and information security. I aspire to obtain additional professional certifications and gain deeper experience in ISO 27001 auditing and GRC practices. I also aim to contribute to organizational growth by promoting strong internal controls, compliance, and continuous improvement. In the long term, I hope to take on leadership roles where I can support effective governance, mentor others, and support organizations achieve operational excellence and resilience.
As I gain more experience in certification auditing, my goal is to specialize further particularly in integrated management systems and risk-based auditing. I plan to expand my qualifications auditing to cover multiple ISO standards such as ISO 9001, 22301,14001 and ISO 45001.
Jessie Addico experience with MSECB
I joined MSECB because of its credibility in the certification industry and its commitment to upholding international standards. I decided to be part of an organization that sets such a high bar for quality and ethics. My experience so far has been positive; the team is supportive, the work is meaningful, and I’ve learned a lot about best practices in auditing and certification.
My experience with MSECB has provided me with valuable exposure to management systems auditing, compliance assessment, and organizational governance practices. With this experience, I have gained a deeper understanding of the importance of maintaining effective internal controls, risk management processes, and continuous improvement within organizations. I have been involved in activities related to reviewing policies, procedures, operational processes, and compliance requirements to ensure alignment with established standards and organizational objectives.
Working in environments aligned with MSECB certification and management system requirements has strengthened my knowledge of ISO 27001 principles, audit methodologies, and the importance of evidence-based assessment. I have developed practical skills in identifying nonconformities, documenting audit findings, evaluating corrective actions, and communicating recommendations professionally to management and relevant stakeholders.
In addition, this experience has enhanced my appreciation for professionalism, integrity, confidentiality, and objectivity in audit and compliance-related activities. I have learned the importance of collaboration with different departments to support effective governance, operational efficiency, and regulatory compliance. The exposure has also improved my analytical thinking, report writing, and stakeholder engagement skills, enabling me to contribute meaningfully to organizational improvement initiatives.
Overall, my experience with MSECB has expanded my understanding of management systems, compliance frameworks, and continuous improvement practices, while improving my commitment to professional development and excellence in auditing, governance, risk management, and information security practices.
MSECB focuses on developing essential skills in auditing to prepare auditors to succeed in their careers. Their commitment to client satisfaction and supporting auditors in their professional growth is strong and consistent.
I would recommend others to become MSECB auditors. MSECB provides valuable hands-on learning with practical and relevant content to ensure auditors are well equipped to deliver high-quality audits. In addition, MSECB provides a professional learning environment and ensures auditors have access to the resources they need to perform at a high level and develop professionally.
Build endless connections and professional networks by joining our team of over 500 MSECB Auditors.
We welcome you on board!
