Open to opportunities

Ade User

@adeuser2

Message

Senior security and risk analyst specializing in GRC and cloud security controls.

Canada

Message

What I'm looking for

I’m looking for a team where I can own risk assessments and IAM/cloud security governance, improve audit readiness, and partner with engineering to remediate control gaps and strengthen detection—while aligning security priorities with business and regulatory requirements.

I’m a cybersecurity & GRC professional with 10+ years securing enterprise systems, cloud environments, and business-critical applications across SaaS, fintech, and digital platforms. I specialize in risk assessments, IAM governance, cloud security posture (AWS/Azure), and compliance frameworks including NIST CSF/RMF, ISO 27001, and SOC 2.

I’m known for improving audit readiness by mapping and validating controls, identifying control gaps, and driving remediation of high-risk findings in production. I strengthen access controls through RBAC, MFA, access certification campaigns, and least privilege enforcement—reducing excessive privilege exposure and orphaned accounts.

On the technical side, I partner with engineering and DevOps to remediate misconfigurations, integrate security into CI/CD pipelines, and improve detection with SIEM dashboards (Splunk, Azure Sentinel). I also lead vendor/third-party risk assessments, support incident response with log analysis and root-cause identification, and deliver security awareness sessions to improve real-world adoption.

Experience

Work history, roles, and key accomplishments

Current

Senior Security & Risk Analyst

Current

Shopify

Mar 2024 - Present (2 years 1 month)

Led deep-dive risk assessments and threat modeling across SaaS platforms and internal applications, driving remediation of high-risk authentication, API, and cloud configuration findings. Strengthened IAM governance and improved audit readiness by mapping controls to NIST CSF, ISO 27001, and SOC 2, while building SIEM dashboards and integrating security checks into CI/CD.

Risk Assessment Threat Modeling MFA CSPM & Misconfiguration Remediation NIST CSF ISO 27001 SOC 2 Control Mapping SIEM Azure Sentinel Vendor Risk Management

Cybersecurity Analyst (GRC)

TaraSpan Inc.

Sep 2022 - Feb 2024 (1 year 5 months)

Owned vulnerability management end to end, including scanning, CVSS prioritization, and coordination for remediation across servers and cloud resources. Monitored security events in Splunk and Azure Sentinel, performed SOC 2/ISO 27001 control mapping and gap analysis, and supported incident response with log analysis and root-cause findings.

Vulnerability Management Splunk Azure Sentinel Control Mapping & Gap Analysis ISO 27001 IAM Access Reviews & Least Privilege Incident Response

Information Security Analyst

Appnovation Technologies

May 2020 - Aug 2022 (2 years 3 months)

Performed application and infrastructure risk assessments, identifying issues across authentication, data flows, and access controls. Supported AWS and Azure security implementation (IAM, encryption, CloudTrail logging) and helped integrate secure SDLC practices, while performing log analysis, anomaly detection, and incident response aligned to NIST 800-61.

Application & Infrastructure Risk Assessment AWS IAM AWS CloudTrail Log Analysis Incident Response

Business Systems Analyst (Security)

Hootsuite

Jun 2018 - Apr 2020 (1 year 10 months)

Embedded security and compliance requirements into system implementations by running process risk assessments and enforcing data protection, access control, and encryption standards. Supported GRC activities with risk registers, control documentation, compliance reporting, vendor risk assessments, and audit-ready documentation in Jira and Confluence.

Access Control Vendor Risk Management Audit Support Jira

Business Systems Specialist (Governance)

Cleanserve Integrated Oil & Energy Solutions

Apr 2016 - May 2018 (2 years 1 month)

Implemented and monitored enterprise security controls focused on access control, data protection, and system integrity. Conducted operational risk assessments, managed user access provisioning and periodic reviews, and supported audit preparation by maintaining security documentation and evidence repositories.

Access Control Data Protection Audit Evidence

Business Systems Analyst

Siji Dosekun Partnership

Nov 2010 - Mar 2016 (5 years 4 months)

Gathered and documented business and system requirements, ensuring security and data governance considerations were built into implementations. Collaborated with IT teams to support secure system implementations, reliability improvements, and ongoing compliance and data protection standards.

Requirements Gathering Data Governance Secure Implementation Compliance Support Collaboration Process Improvement