Open to opportunities

Marcia Folajimi

@marciafolajimi

Message

Cybersecurity GRC manager translating technical risk into measurable business outcomes.

United States

Message

What I'm looking for

I’m looking to lead GRC and third-party risk programs—automating continuous control monitoring, strengthening compliance outcomes, and partnering with engineering to reduce risk and cost while improving audit readiness.

I’m a CISSP/CISA/CISM certified Cybersecurity GRC Manager and Risk Management Specialist who aligns security and data architecture with business growth. I lead cross-functional teams to execute complex technical roadmaps and turn technical risk into measurable financial and operational wins.

At CableOne, I spearheaded a SOX compliance program transformation in AuditBoard, bringing repeat deficiencies from 60% to 0% and saving $1.2M in fines. I architected data de-scoping to reduce technical debt and saved over $1.5M annually in assessment charges and employee hours, while guiding PCI control changes that removed call centers from PCI scope—eliminating over $1.5M annually in costs.

I also automated continuous control monitoring to move from manual data gathering to BAU operations, improving security posture through faster identification and resolution of issues. Additionally, I launched the first official Third-Party Risk Management (TPRM) program using Drata, lowering cybersecurity insurance premiums by $75k per year through stronger data security controls.

Earlier roles strengthened my foundation in governance and compliance execution: I helped move a Service Provider client from 30% to 95% PCI compliance, modernized third-party risk management under CIP-13, and built real-time visibility dashboards that improved executive query response time by 80%. I’ve also managed HIPAA-aligned workflows and data integrity in high-volume healthcare settings, including supervising 20+ associates and delivering 100% accuracy during demand spikes.

Experience

Work history, roles, and key accomplishments

Current

Manager, Cybersecurity GRC

Current

CableOne

Feb 2023 - Present (3 years 5 months)

Reformed the SOX compliance program using AuditBoard, reducing repeat deficiencies from 60% to 0% and saving $1.2M in fines. Architected data de-scoping and automated continuous control monitoring, lowering PCI compliance risk exposure and improving third-party risk management to reduce cyber insurance premiums by $75k per year.

SOX Compliance AuditBoard Data Governance Data Architecture Technical Debt Reduction PCI Compliance PCI DSS Third Party Risk Management TPRM Drata Continuous Control Monitoring Risk Management Policy Development Compliance Automation

PCI Compliance Analyst

The HT Group

Apr 2024 - Apr 2025 (1 year)

Led a cross-functional project to move a service provider client from 30% to 95% PCI compliance by aligning engineering, development, and corporate compliance teams. Built continuous compliance systems to support long-term audit readiness.

PCI DSS PCI Compliance Cross Functional Collaboration Stakeholder Management Audit Readiness Roles And Responsibilities Definition

Senior Security & Risk Analyst

MISO

Feb 2023 - Mar 2024 (1 year 1 month)

Reduced friction between procurement and compliance by re-engineering communication protocols and cutting conflict resolution meetings by 100%. Migrated CIP-13 third-party risk management through vendor-centric automation and modernized procurement workflows using ZipHQ, improving query response times for executive stakeholders by 80%.

Third Party Risk Management Vendor Centric Automation Procurement Lifecycle Modernization Data Tracing Dashboard Microsoft Teams Risk Management Compliance Coordination

Team Captain

Eskenazi Health

Apr 2019 - Feb 2023 (3 years 10 months)

Managed data integrity and HIPAA compliance for a primary care setting, overseeing 20+ associates and ensuring secure data entry into EPIC electronic health records. Optimized high-volume patient data workflows to maintain 100% accuracy and regulatory compliance.

HIPAA compliance Data Integrity Data Entry Team Leadership

Senior Security / Risk Analyst

Canary Harbour

Jun 2017 - Feb 2023 (5 years 8 months)

Supported assessments across NIST CSF maturity, ISO 27001, PCI DSS, and SOX, facilitating remediation of control gaps and documentation of exceptions. Managed identity and access management request reviews, maintained the risk registry, and transitioned third-party risk management from ad hoc practices to a formal enterprise framework to improve governance and transparency.