Open to opportunities

Faith Owusu

@faithowusu

Message

Director of information security and compliance driving risk reduction and regulatory alignment.

United States

Message

What I'm looking for

I seek a leadership role where I can drive enterprise security and compliance, mentor teams, integrate controls across cloud and vendor ecosystems, and improve audit readiness within a collaborative, accountable culture.

I am a director-level information security and compliance professional with a track record of leading enterprise programs that strengthen protection, reduce risk, and ensure regulatory alignment.

I have driven security and compliance strategy across organizations, embedding controls into systems, vendors, and business processes, and improving audit readiness through oversight of internal and external assessments.

My experience includes FedRAMP, HIPAA, PCI DSS, NIST, cloud security integration, privacy program development, and vendor risk management, with hands-on roles creating SSPs, SARs, POA&Ms, and remediation plans.

I mentor and build high-performing teams, advise executives, foster a culture of accountability, and deliver measurable improvements in compliance posture and operational resilience.

Experience

Work history, roles, and key accomplishments

Current

Director of Information Security

Current

Info Tech Advisors Institute Inc.

Apr 2023 - Present (2 years 6 months)

Direct enterprise-wide security and compliance strategy, implemented frameworks that strengthened protection and improved audit readiness across GDPR, HIPAA, and PCI-DSS. Led remediation efforts and mentored teams to reduce organizational risk exposure and embed compliance into business operations.

PCI DSS GDPR)Risk Assessment Team Leadership HIPAA GDPR

Sr. Security & Compliance Manager

Adhoc LLC

Aug 2019 - Mar 2023 (3 years 7 months)

Led security governance and federal-aligned compliance improvements, maintained FedRAMP authorization through SSPs and evidence collection, and drove vulnerability remediation to reduce exposure. Partnered with developers and executives to elevate application security and compliance posture.

FedRAMP SSP Vulnerability Management Nessus Security Governance Application Security Training

Information System Security Officer

Managed Care Advisors Inc.

Jun 2017 - Aug 2019 (2 years 2 months)

Spearheaded enterprise security and privacy programs, reversed failed HIPAA assessments within one year, and led cloud security initiatives and global data privacy implementation to enable compliant international operations.

HIPAA)Cloud Security Privacy Programs Risk Management Stakeholder Engagement HIPAA

Lead Security Control Assessor

Actionet LLC

Mar 2015 - Jun 2017 (2 years 3 months)

Directed independent security assessments against federal and NIST standards, produced SAR/SSP/POA&M for ATO submissions, and improved assessment consistency and remediation through stakeholder engagement and template updates.

NIST SARs SSP POA&M Updates Nessus Qualys

Security Analyst | IT Auditor

Capital One Bank

Feb 2013 - Mar 2015 (2 years 1 month)

Conducted audits, vulnerability analysis, and incident response to improve enterprise reliability and compliance; led phishing simulations and training to raise employee security awareness and drove timely remediation of critical findings.

IT Audit Vulnerability Management Nessus Incident Response Security Awareness Troubleshooting Reporting

Education

Degrees, certifications, and relevant coursework

University of Maryland University College

Master of Business Administration, Business Administration

Completed a Master of Business Administration focusing on business and management principles to support leadership in information security and compliance.