Open to opportunities

Dami Obasa

@damiobasa

Cybersecurity compliance consultant specializing in ISO 27001, GDPR, and DORA governance and audit readiness in regulated environments.

Ireland

Message

What I'm looking for

I’m looking to keep leading security governance and compliance programs—driving audit readiness, closing ISO and regulatory gaps, and strengthening risk controls—while partnering with stakeholders to deliver measurable improvements in regulated organizations.

I’m an IT & Security Consultant with a strong track record leading regulatory compliance programs, audit readiness, and policy development in highly regulated environments. I review and update IT and security policies against NIST and DORA, build documentation aligned with ISO 27001 and regulatory expectations, and map regulatory requirements to internal controls to drive practical mitigation plans.

Over the years, I’ve delivered enterprise-level security governance improvements across financial, technology, and energy sectors—leading global projects and security audits for clients aligned to ISO 27001, GDPR, NIS2, DORA, PCI DSS, and NIST. I coordinate cross-functional stakeholders, manage third-party assessments, run gap assessments and policy reviews (including ISO 27002 and COBIT 5), and support privacy programs aligned with GDPR and ISO 27701—always with a focus on clear reporting to senior leadership and continuous improvement.

Experience

Work history, roles, and key accomplishments

Current

IT & Security Consultant

Current

Large Assurance

Jan 2025 - Present (1 year 6 months)

Review and update IT and security policies against NIST and DORA, closing compliance gaps. Develop ISO 27001-aligned security documentation and support enterprise risk assessments by mapping regulatory requirements to internal controls and mitigation plans.

ISO 27001 NIST DORA

Security Delivery Lead

Accenture Limited

Jan 2022 - Jan 2025 (3 years)

Led global security compliance projects, overseeing planning, execution, and risk coordination. Delivered audit readiness and remediation initiatives aligned to ISO 27001, GDPR, NIS2, and DORA, and supported continuous improvement of security policies and procedures.

Security Governance Audit Readiness remediation ISO 27001 GDPR NIS 2 DORA Security Policies

Digital Risk Consultant

PricewaterhouseCoopers Limited

Aug 2018 - Jan 2022 (3 years 5 months)

Led multiple security audits, including application security reviews, third-party assessments, and internal control evaluations. Drove audit readiness planning and compliance strategy, assessing security posture against ISO 27001, ISO 22301, PCI DSS, and NIST, and supporting privacy and data protection programs aligned with GDPR and ISO 27701.

Security Audits Application Security Internal Controls Audit Readiness Compliance Strategy ISO 27001 PCI DSS NIST GDPR ISO 27701 ISO 27002 Policy Reviews Privacy and Data Protection

Security & Compliance Officer

Infoprive Services Limited

Nov 2017 - Jul 2018 (8 months)

Managed PCI DSS compliance engagements in coordination with Qualified Security Assessors (QSAs) and evaluated control effectiveness through operational and technical assessments. Facilitated project planning sessions and contributed to an ISO 27001 certification project for a mid-sized technology firm.

PCI DSS Qualified Security Assessor (QSA)Control Effectiveness Technical Assessments Project Planning ISO 27001

Information Security Consultant

Digital Jewels Africa Limited

Apr 2017 - Oct 2017 (6 months)

Delivered ISO 27001, ISO 22301, and PCI DSS compliance projects from assessment to certification. Performed gap analyses, managed audit preparations, and supported client response documentation, including streamlining proposal processes to reduce turnaround time.

ISO 27001 PCI DSS Gap Analysis Audit Preparation Client Response Documentation