Open to opportunities

Niyi User

@niyiuser

Message

Experienced GRC Security Analyst with expertise in risk management.

Canada

Message

What I'm looking for

I am looking for a role that fosters professional growth and values cybersecurity excellence.

I am an experienced GRC Security Analyst with a strong background in risk management, compliance auditing, and security governance. My expertise lies in developing and implementing robust security policies, leading third-party risk assessments, and ensuring adherence to regulatory standards such as SOC 2, HIPAA, GDPR, PCI-DSS, and SOX. I have a proven track record of conducting internal and external audits, effectively mitigating security risks, and enhancing security awareness programs.

Throughout my career, I have successfully collaborated with cross-functional teams to strengthen cybersecurity postures, achieving significant reductions in compliance gaps. Notably, I led a vendor risk management initiative that assessed over 50 third-party vendors annually, resulting in an 80% reduction in third-party risk. My commitment to excellence is reflected in my ability to enhance incident detection and response by 90%, integrating advanced tools like Splunk for real-time threat monitoring.

Experience

Work history, roles, and key accomplishments

Senior Compliance Specialist

Microsoft

Sep 2017 - Jan 2025 (7 years 4 months)

As a Senior Compliance Specialist at Microsoft, I developed and enforced IT security policies aligned with ISO 27001 and NIST CSF, managed audits, and led vendor risk assessments. My efforts resulted in significant improvements in compliance adherence and audit readiness, achieving 100% SOC 2 compliance and reducing compliance deviations by 75%.

ISO 27001 NIST CSF Audit Management Vendor Assessment Compliance Monitoring OneTrust AuditBoard

IT Auditor

Access Bank Plc

Feb 2012 - Aug 2017 (5 years 6 months)

In my role as an IT Auditor at Access Bank Plc, I conducted risk assessments and led security control testing initiatives. I implemented vulnerability assessments and enhanced incident response protocols, achieving a significant reduction in security threats and improving compliance scores across the organization.

Risk Assessment Security Control Assessment Vulnerability Assessment Incident Response Splunk LogicGate Microsoft Defender Data Loss Prevention

Operations Analyst (Compliance-Risk)

Intercontinental Bank

May 2009 - Jan 2012 (2 years 8 months)

As an Operations Analyst at Intercontinental Bank, I directed third-party risk management initiatives and supervised business continuity testing. I established a governance framework and implemented cloud security compliance checks, enhancing risk reporting accuracy and reducing potential downtime risks.

Third Party Risk Management Business Continuity Testing Governance Security Compliance Risk Mitigation AWS Security