Open to opportunities

Ayo Griffin

@ayogriffin

Message

Information Security and IT Audit professional specializing in GRC, SOX, and compliance.

United States

Message

What I'm looking for

I seek a role where I can lead GRC and IT audit efforts, apply automation to risk management, and collaborate cross-functionally to strengthen security and compliance while advancing professionally.

I am an experienced Information Security and IT Audit professional with a strong background in GRC, SOX, SOC compliance, and risk management across consulting and financial services. I have led control testing, vulnerability assessments, and remediation efforts, implementing automated risk assessments and governance dashboards that improved on-time remediation and operational effectiveness.

I collaborate with cross-functional teams to develop policies, enforce security standards, and enhance incident detection and response through automation and tooling. My certifications (CISA, PMP, CSM, ITIL) and hands-on experience with frameworks like NIST, ISO 27001, COBIT, and SOC 2 enable me to strengthen control environments and drive measurable compliance improvements.

Experience

Work history, roles, and key accomplishments

Current

Information Security Analyst

Current

KPMG

Apr 2025 - Present (7 months)

Assessed ITGCs, infrastructure, and third-party risks across clients; implemented CAPs and governance dashboards achieving a 60% on-time remediation rate while reducing incident response times through automated alerting.

GRC IT General Controls Vulnerability Assessment Penetration Testing NIST ISO 27001 Incident Response Third Party Risk Management SIEM

IT Auditor / GRC Analyst

Genpact

May 2022 - Feb 2025 (2 years 9 months)

Automated risk assessments and monitoring to enhance ITGC and ITAC test coverage, implemented automated reporting and QA scripts to improve audit efficiency and identify vulnerabilities across global processes.

Automation ITGC IT業務処理統制 (ITAC)Risk Assessment Automation Audits Monitoring SQL

SOX Compliance / IT Auditor

Bank of the West

Dec 2020 - May 2022 (1 year 5 months)

Performed SOX and PCI DSS audits, tested OS/servers/databases/network controls, and conducted SDLC reviews that resolved 85% of control deficiencies and improved operational effectiveness by 30%.

SOX PCI DSS SDLC Risk Assessment Change Management

IT Auditor

PwC

Oct 2019 - Nov 2020 (1 year 1 month)

Conducted risk-based IT audits of ITGCs and application controls, mitigating 90% of high-risk vulnerabilities and reducing compliance gaps by 40% while supporting SOX engagements that improved efficiency by 25%.

IT Audit ITGC IT Application Controls COBIT SOX Business Continuity Audit Reporting

IT Auditor / Risk Analyst

Assurant

Jun 2018 - Sep 2019 (1 year 3 months)

Supported GRC deployment and performed scoping, walkthroughs, and testing of ITGCs including IAM, change management, and security operations; maintained RCMs and recommended process improvements.

GRC ITGC Identity & Access Management Change Management