Olanike Aluko

I am a detail-oriented Governance, Risk, and Compliance (GRC) professional with hands-on experience conducting internal audits, control testing, and compliance assessments across cloud and on-premises environments. I apply regulatory frameworks such as ISO 27001, GDPR, HIPAA, NIST 800-53, HITRUST, SOX, and SOC 2 to strengthen security posture and ensure data privacy.

In my roles I have led evidence collection and audit readiness efforts, identified control gaps and recommended remediation strategies, and collaborated with cross-functional teams and external auditors to maintain regulatory alignment. I designed and implemented a data protection plan for a mock healthcare organization, mapped dataflows to NIST 800-53 controls, and drafted compliance checklists aligned to HIPAA and GDPR.

I am preparing for the ISACA CISA certification to deepen my IT audit and information systems control expertise, and I actively pursue professional development through workshops and webinars on cybersecurity governance and data privacy.