Josephine Odunayo

I’m a Senior IT Compliance Analyst with 6+ years of experience leading SOX IT compliance, IAM governance, and technology risk management programs across regulated environments. I consistently deliver audit-ready outcomes by executing rigorous ITGC and ITAC testing and translating technical risk into executive-ready insights.

At Lifepoint Health, I led SOX IT compliance across 21 in-scope systems and cloud environments, executing access management, change management, and system operations testing. I achieved a 35% reduction in repeat audit findings over two audit cycles by improving control design and evidence documentation, and I maintained clean audit close results with no carry-forward findings across the last two cycles.

I align risk and controls to NIST CSF and ISO 27001, directing IT security risk assessments and control gap analyses while managing remediation backlogs (40+ risk items) with 90%+ closure rates within SLAs. I also assess cloud security controls across AWS and Azure—covering IAM configurations, MFA enforcement, encryption standards, and CloudTrail logging—remediating 15+ cloud control gaps within 90 days, while strengthening compliance for HIPAA-aligned AI governance.

Earlier, as an IT Compliance Analyst at Indigo Flex Consulting and an Associate GRC Analyst at ExxonMobil, I strengthened IAM and compliance operations through quarterly user access reviews, SoD conflict analysis, privileged access monitoring, and deprovisioning validation. With experience using AuditBoard, ServiceNow GRC, and Power BI dashboards, I partner across IT, Security, Legal, and business leadership to close gaps, improve evidence traceability, and support timely remediation. I hold CISA and PMP certifications and build programs grounded in SOX 404, NIST CSF, NIST 800-53, ISO 27001, HIPAA, HITRUST, and PCI DSS.