ABIOLA AJALA
Senior Information Security Consultant & IT GRC Specialist
Saskatchewan, CA.About
Highly accomplished and results-oriented Information Security Consultant and IT GRC Specialist with over a decade of progressive experience in IT Risk, Governance, and Compliance. Proven expertise in leading complex cybersecurity initiatives, managing enterprise IT infrastructure, and optimizing Identity and Access Management (IAM) processes. Adept at leveraging modern Computer Forensics and IT Audit tools, with strong experience in implementing and auditing PCI-DSS, ISO 27001, and ISO 22301 Management Standards across diverse industries including finance, e-commerce, consulting, telecoms, FMCG, and B2B. Possessing advanced knowledge of cybersecurity practices, threat intelligence, incident response, and risk management, I excel at translating complex requirements into actionable strategies, ensuring compliance, and driving significant improvements in an organization's security posture. A strong leader and communicator, I am committed to continuous learning and solving complex security challenges.
Work
Summary
First City Monument Bank is a financial services holding company headquartered in Lagos.
Highlights
Conducted comprehensive audits of IT infrastructure and applications, including Firewalls, Routers, Switches, ATM, Internet Banking web, and DB Servers.
Managed privileged access reviews and compliance reporting using CyberArk, ensuring strict adherence to access control policies and reducing audit findings.
Performed technical reviews of diverse systems including Operating Systems (Windows, Unix), ERP Applications, Databases (Oracle, MSSQL, MySQL), Data Centre, Azure AD, and O365.
Conducted periodic audits of the Internal Systems Control department, focusing on systems, application, and database controls and security.
Executed regular compliance checks with Wiz, identifying and tracking cloud security gaps, and developing action plans for remediation.
Identified and recommended strategies to enhance the bank's cybersecurity risk identification, assessment, and mitigation capabilities.
Investigated suspicious network activities and conducted security assessments for new/acquired applications pre-launch.
Summary
Wise, previously known as TransferWise, is a financial technology company focused on global money transfers.
Highlights
Led the definition and implementation of robust Identity and Access Management (IAM) standards, enhancing operational efficiency and significantly reducing security risks.
Directed the management and reporting of audit issues and risk reviews, ensuring the development and implementation of effective controls to resolve self-identified, internal, and external audit findings and incidents.
Validated the effectiveness of Joiner, Mover, Leaver (JML) controls and Access Management policies, ensuring secure cloud application access, privileged account management, and robust identity analytics.
Evaluated and leveraged advanced IAM tools including Sailpoint, OKTA, Workato, and 1password to inform and optimize operational security strategies.
Established and enforced comprehensive enterprise-wide security guidelines and procedures, ensuring the integrity, availability, and confidentiality of critical corporate assets.
Conducted security assessments and automated compliance checks within AWS cloud environments, proactively identifying and remediating vulnerabilities to strengthen organizational security posture.
Leveraged Wiz for comprehensive cloud security posture assessments, enabling proactive threat detection and streamlining compliance reporting.
Provided strategic guidance to Business Unit and IT leaders on prioritizing security initiatives, aligning them with business risks, compliance demands, financial implications, and corporate strategy.
Oversaw IAM Risk and Controls processes, including the secure onboarding of first-party and third-party applications, to establish robust identity and access control functions.
Delivered strategic and tactical risk and compliance guidance on machine, service, and break-glass accounts, enhancing governance and control frameworks.
Collaborated cross-functionally with Finance, Third-Party Risk Management, Audit, and Compliance teams to successfully navigate IAM-related internal and external audits (ISO 27001, PCI, COBIT, and IT control frameworks).
Summary
Kuehne + Nagel International AG is a global transport and logistics company.
Highlights
Provided expert consultation and in-depth support for critical enterprise applications and their integration with complex surrounding systems.
Collaborated with Business Units, QA, and DevOps teams to successfully launch new application instances, implement change/feature requests, and manage application releases.
Translated complex business requirements into detailed Solution Design documentation, providing architectural guidance and best practices.
Actively contributed to upgrades, information security, data privacy, and compliance initiatives, ensuring robust application integrity and security.
Summary
Cybercube is a market-leading cyber risk analytics platform that aims to solve cyber risk problems in insurance.
Highlights
Managed OKTA System administration and corporate device management (JAMF, Microsoft Intune) for enhanced security and operational efficiency.
Streamlined IT onboarding and off-boarding processes for European new hires and delivered IT training programs.
Supported the execution of information security audits, conducted InfoSec training, and managed company information security policies.
Administered and optimized protection systems, including antivirus and firewall, to safeguard organizational assets.
Evaluated and administered internal software applications, ensuring optimal performance and security.
Resolved internal IT issues, provided technical support, and developed/updated IT policies.
Managed the full lifecycle of European vendors, from evaluation and acquisition to onboarding and ongoing management.
Successfully implemented and managed ad-hoc IT projects, ensuring timely completion and alignment with business objectives.
Summary
First Bank is a leading multinational financial service provider based in Nigeria.
Highlights
Examined internal IT controls, evaluating design and operational effectiveness to identify risk exposures and develop robust remediation strategies.
Led Cybersecurity Audits, collaborating with stakeholders to remediate findings and improve AWS Cloud Services compliance scores by 22%.
Identified network and system vulnerabilities through comprehensive testing and developed effective countermeasures to enhance network security.
Reviewed, evaluated, and tested application controls, utilizing Wiz to scan cloud environments for risks in VMs, containers, and serverless configurations.
Provided actionable recommendations and guidance on identified security and control risks to improve security posture.
Authored comprehensive and well-structured internal audit reports, detailing findings and recommendations.
Summary
Digital Jewels Limited is the leading Afro-centric IT Governance, Risk and Compliance (GRC) Consulting & Capacity Building Firm in Africa.
Highlights
Managed the full project lifecycle for ISO 27001, ISO 22301, ISO 20000, and ISO 9001 certifications, ensuring adherence to relevant controls and guidelines.
Conducted IT Audits and Management System Mock Audits for clients using a risk-based approach.
Facilitated enterprise-wide awareness sessions for clients on Information Security, Business Continuity, and Cybersecurity.
Supported organizations in implementing IT Governance frameworks, leveraging COBIT 5 and ITIL.
Performed comprehensive Gap, Risk, Security assessments, and Business Impact Analysis (BIA) for enterprises.
Deployed Cisco switches, Cyberoam CR I5iNG gateway/firewall, and Windows Servers to optimize IT infrastructure.
Enhanced security systems by deploying UTM for IDS, authentication, log management, content filtering, web gateway, and NAC capabilities.
Summary
One Africa Media operates an online marketplace focusing on jobs, cars, property and travel services.
Highlights
Installed and configured Windows Server 2008 R2, Active Directory, DNS, and DHCP Servers.
Configured and managed IP telephony and PBX server environments.
Implemented ISA & TMG server 2010 and VPN solutions.
Monitored and managed network infrastructure to ensure optimal performance.
Managed LAN and WLAN environments across workgroups and domains.
Configured and managed server virtualization using Microsoft Hyper-V.
Led Contact Centre migration and project implementation efforts.
Summary
Consol Limited is the leading provider of Contact/Call Center services and Customer Management Solutions in Nigeria.
Highlights
Installed and configured Windows Server 2008 R2, Active Directory, DNS, and DHCP Servers.
Configured and managed IP telephony and PBX server environments.
Implemented ISA & TMG server 2010 and VPN solutions.
Monitored and managed network infrastructure to ensure optimal performance.
Managed LAN and WLAN environments across workgroups and domains.
Configured and managed server virtualization using Microsoft Hyper-V.
Led Contact Centre migration and project implementation efforts.
Languages
English
Native
Certificates
Skills
Cybersecurity & GRC
Risk Assessment, IT Controls Testing, Incident Management, GRC, IAM Techniques, Security Awareness Training, SOC Administration, Cloud Security Posture Management (CSPM), Threat Intelligence, Compliance & Regulations, Network & System Analysis, Vulnerability Management, Cybersecurity Audits, IT Audit, Information Security, Business Continuity Management, Information Asset & Data Protection, IT Project Management, IT Service Management and Delivery.
Standards & Frameworks
ISO 27001, ISO 27032, ISO 31000, PCI-DSS, SOC2, ISO 22301, ISO 20000, ISO 9001, NIST, GDPR, CIS, COBIT 5, ITIL.
Tools & Platforms
OKTA, SailPoint, Workato, Jira, Atlassian tools, Wiz, CyberArk, Microsoft Azure, AWS Cloud Infrastructure, Hyper-V, VMware, VirtualBox, QRadar SIEM, Qualys Guard, Nessus, Nmap, Wireshark, JAMF, Microsoft Intune, WAF/DAM, NAC, Firewall/UTM, Postilion, Swift, Oracle, MSSQL, MySQL, Active Directory, DNS, DHCP, ISA Server, TMG Server.
Methodologies & Assessments
Gap analysis/assessment, Mock Audits, Risk Assessment and Vulnerability Assessment, Business Impact Analysis (BIA), Solution Design Documentation.
Soft Skills
Leadership, Teamwork, Communication, Problem-Solving, Continuous Learning, Strategic Guidance, Cross-functional Collaboration.