ABIOLA AJALA

Senior Information Security Consultant & IT GRC Specialist
Saskatchewan, CA.

About

Highly accomplished and results-oriented Information Security Consultant and IT GRC Specialist with over a decade of progressive experience in IT Risk, Governance, and Compliance. Proven expertise in leading complex cybersecurity initiatives, managing enterprise IT infrastructure, and optimizing Identity and Access Management (IAM) processes. Adept at leveraging modern Computer Forensics and IT Audit tools, with strong experience in implementing and auditing PCI-DSS, ISO 27001, and ISO 22301 Management Standards across diverse industries including finance, e-commerce, consulting, telecoms, FMCG, and B2B. Possessing advanced knowledge of cybersecurity practices, threat intelligence, incident response, and risk management, I excel at translating complex requirements into actionable strategies, ensuring compliance, and driving significant improvements in an organization's security posture. A strong leader and communicator, I am committed to continuous learning and solving complex security challenges.

Work

First City Monument Bank (FCMB)
|

Information Systems Auditor

Summary

First City Monument Bank is a financial services holding company headquartered in Lagos.

Highlights

Conducted comprehensive audits of IT infrastructure and applications, including Firewalls, Routers, Switches, ATM, Internet Banking web, and DB Servers.

Managed privileged access reviews and compliance reporting using CyberArk, ensuring strict adherence to access control policies and reducing audit findings.

Performed technical reviews of diverse systems including Operating Systems (Windows, Unix), ERP Applications, Databases (Oracle, MSSQL, MySQL), Data Centre, Azure AD, and O365.

Conducted periodic audits of the Internal Systems Control department, focusing on systems, application, and database controls and security.

Executed regular compliance checks with Wiz, identifying and tracking cloud security gaps, and developing action plans for remediation.

Identified and recommended strategies to enhance the bank's cybersecurity risk identification, assessment, and mitigation capabilities.

Investigated suspicious network activities and conducted security assessments for new/acquired applications pre-launch.

Wise formerly Transferwise
|

Senior Identity & Access GRC Specialist

Summary

Wise, previously known as TransferWise, is a financial technology company focused on global money transfers.

Highlights

Led the definition and implementation of robust Identity and Access Management (IAM) standards, enhancing operational efficiency and significantly reducing security risks.

Directed the management and reporting of audit issues and risk reviews, ensuring the development and implementation of effective controls to resolve self-identified, internal, and external audit findings and incidents.

Validated the effectiveness of Joiner, Mover, Leaver (JML) controls and Access Management policies, ensuring secure cloud application access, privileged account management, and robust identity analytics.

Evaluated and leveraged advanced IAM tools including Sailpoint, OKTA, Workato, and 1password to inform and optimize operational security strategies.

Established and enforced comprehensive enterprise-wide security guidelines and procedures, ensuring the integrity, availability, and confidentiality of critical corporate assets.

Conducted security assessments and automated compliance checks within AWS cloud environments, proactively identifying and remediating vulnerabilities to strengthen organizational security posture.

Leveraged Wiz for comprehensive cloud security posture assessments, enabling proactive threat detection and streamlining compliance reporting.

Provided strategic guidance to Business Unit and IT leaders on prioritizing security initiatives, aligning them with business risks, compliance demands, financial implications, and corporate strategy.

Oversaw IAM Risk and Controls processes, including the secure onboarding of first-party and third-party applications, to establish robust identity and access control functions.

Delivered strategic and tactical risk and compliance guidance on machine, service, and break-glass accounts, enhancing governance and control frameworks.

Collaborated cross-functionally with Finance, Third-Party Risk Management, Audit, and Compliance teams to successfully navigate IAM-related internal and external audits (ISO 27001, PCI, COBIT, and IT control frameworks).

Kuehne+Nagel International AG
|

IT Application Expert

Summary

Kuehne + Nagel International AG is a global transport and logistics company.

Highlights

Provided expert consultation and in-depth support for critical enterprise applications and their integration with complex surrounding systems.

Collaborated with Business Units, QA, and DevOps teams to successfully launch new application instances, implement change/feature requests, and manage application releases.

Translated complex business requirements into detailed Solution Design documentation, providing architectural guidance and best practices.

Actively contributed to upgrades, information security, data privacy, and compliance initiatives, ensuring robust application integrity and security.

CyberCube Analytics
|

IT Business Operations Manager

Summary

Cybercube is a market-leading cyber risk analytics platform that aims to solve cyber risk problems in insurance.

Highlights

Managed OKTA System administration and corporate device management (JAMF, Microsoft Intune) for enhanced security and operational efficiency.

Streamlined IT onboarding and off-boarding processes for European new hires and delivered IT training programs.

Supported the execution of information security audits, conducted InfoSec training, and managed company information security policies.

Administered and optimized protection systems, including antivirus and firewall, to safeguard organizational assets.

Evaluated and administered internal software applications, ensuring optimal performance and security.

Resolved internal IT issues, provided technical support, and developed/updated IT policies.

Managed the full lifecycle of European vendors, from evaluation and acquisition to onboarding and ongoing management.

Successfully implemented and managed ad-hoc IT projects, ensuring timely completion and alignment with business objectives.

First Bank of Nigeria
|

Technology Infrastructure Auditor

Summary

First Bank is a leading multinational financial service provider based in Nigeria.

Highlights

Examined internal IT controls, evaluating design and operational effectiveness to identify risk exposures and develop robust remediation strategies.

Led Cybersecurity Audits, collaborating with stakeholders to remediate findings and improve AWS Cloud Services compliance scores by 22%.

Identified network and system vulnerabilities through comprehensive testing and developed effective countermeasures to enhance network security.

Reviewed, evaluated, and tested application controls, utilizing Wiz to scan cloud environments for risks in VMs, containers, and serverless configurations.

Provided actionable recommendations and guidance on identified security and control risks to improve security posture.

Authored comprehensive and well-structured internal audit reports, detailing findings and recommendations.

Digital Jewels Limited
|

IT GRC Consultant and IT Advisor

Summary

Digital Jewels Limited is the leading Afro-centric IT Governance, Risk and Compliance (GRC) Consulting & Capacity Building Firm in Africa.

Highlights

Managed the full project lifecycle for ISO 27001, ISO 22301, ISO 20000, and ISO 9001 certifications, ensuring adherence to relevant controls and guidelines.

Conducted IT Audits and Management System Mock Audits for clients using a risk-based approach.

Facilitated enterprise-wide awareness sessions for clients on Information Security, Business Continuity, and Cybersecurity.

Supported organizations in implementing IT Governance frameworks, leveraging COBIT 5 and ITIL.

Performed comprehensive Gap, Risk, Security assessments, and Business Impact Analysis (BIA) for enterprises.

Deployed Cisco switches, Cyberoam CR I5iNG gateway/firewall, and Windows Servers to optimize IT infrastructure.

Enhanced security systems by deploying UTM for IDS, authentication, log management, content filtering, web gateway, and NAC capabilities.

ONE AFRICA MEDIA (JOBBERMAN, CHEKI & PRIVATE PROPERTY)
|

Technology Infrastructure Analyst

Summary

One Africa Media operates an online marketplace focusing on jobs, cars, property and travel services.

Highlights

Installed and configured Windows Server 2008 R2, Active Directory, DNS, and DHCP Servers.

Configured and managed IP telephony and PBX server environments.

Implemented ISA & TMG server 2010 and VPN solutions.

Monitored and managed network infrastructure to ensure optimal performance.

Managed LAN and WLAN environments across workgroups and domains.

Configured and managed server virtualization using Microsoft Hyper-V.

Led Contact Centre migration and project implementation efforts.

Contact Solutions Limited
|

Information Systems Engineer

Summary

Consol Limited is the leading provider of Contact/Call Center services and Customer Management Solutions in Nigeria.

Highlights

Installed and configured Windows Server 2008 R2, Active Directory, DNS, and DHCP Servers.

Configured and managed IP telephony and PBX server environments.

Implemented ISA & TMG server 2010 and VPN solutions.

Monitored and managed network infrastructure to ensure optimal performance.

Managed LAN and WLAN environments across workgroups and domains.

Configured and managed server virtualization using Microsoft Hyper-V.

Led Contact Centre migration and project implementation efforts.

Education

Tallinn University of Technology, Estonia

Master's

Technology Governance & Digital Transformation

National Open University of Nigeria

B.Sc.

Computer Science

Languages

English

Native

Certificates

Computer Hacking Forensic Investigator (CHFI)

Issued By

EC-Council

ISO/IEC 27032 - Lead Cyber Security Manager

Issued By

PECB

PECB ISO 27001 Lead Implementer and Lead Auditor

Issued By

PECB

COBIT 5 - Control Objectives for Information And Related Technologies

Issued By

ISACA

IBM Security Intelligence Engineer – QRadar

Issued By

IBM

GDPR Data Protection Officer Skills

Issued By

GDPR Institute

Information Technology Infrastructure Library (ITIL)

Issued By

AXELOS

Microsoft Certified: Azure Solutions Architect Expert

Issued By

Microsoft

Microsoft Certified: Azure Administrator Associate

Issued By

Microsoft

Microsoft Certified: Azure Security Engineer Associate

Issued By

Microsoft

Fortinet Network Security Associate (NSE 1 & 2)

Issued By

Fortinet

CyberArk Certified Trustee

Issued By

CyberArk

Skills

Cybersecurity & GRC

Risk Assessment, IT Controls Testing, Incident Management, GRC, IAM Techniques, Security Awareness Training, SOC Administration, Cloud Security Posture Management (CSPM), Threat Intelligence, Compliance & Regulations, Network & System Analysis, Vulnerability Management, Cybersecurity Audits, IT Audit, Information Security, Business Continuity Management, Information Asset & Data Protection, IT Project Management, IT Service Management and Delivery.

Standards & Frameworks

ISO 27001, ISO 27032, ISO 31000, PCI-DSS, SOC2, ISO 22301, ISO 20000, ISO 9001, NIST, GDPR, CIS, COBIT 5, ITIL.

Tools & Platforms

OKTA, SailPoint, Workato, Jira, Atlassian tools, Wiz, CyberArk, Microsoft Azure, AWS Cloud Infrastructure, Hyper-V, VMware, VirtualBox, QRadar SIEM, Qualys Guard, Nessus, Nmap, Wireshark, JAMF, Microsoft Intune, WAF/DAM, NAC, Firewall/UTM, Postilion, Swift, Oracle, MSSQL, MySQL, Active Directory, DNS, DHCP, ISA Server, TMG Server.

Methodologies & Assessments

Gap analysis/assessment, Mock Audits, Risk Assessment and Vulnerability Assessment, Business Impact Analysis (BIA), Solution Design Documentation.

Soft Skills

Leadership, Teamwork, Communication, Problem-Solving, Continuous Learning, Strategic Guidance, Cross-functional Collaboration.