Open to opportunities

Oluwatosin Oyedele

@oluwatosinoyedele

Cybersecurity control assessor specializing in RMF, NIST 800-53A testing, and ATO-ready compliance for cloud and federal environments.

United States

Message

What I'm looking for

I’m looking to drive evidence-based control validation and authorization readiness (RMF/FedRAMP/ATO), partnering with stakeholders to remediate risks in cloud and emerging tech—especially AI-enabled solutions—while keeping security documentation audit-defensible.

I’m a hands-on Information Security Control Assessor with 9+ years of experience conducting NIST SP 800-53A security assessments, technical control validation, and RMF authorization activities across banking, healthcare, fintech, cloud, and federal environments.

I validate host and network access controls, review audit logs, analyze vulnerability scan results, assess incident response processes, and produce authorization artifacts that support ATO decisions. I translate findings into prioritized remediation recommendations for Authorizing Officials and senior leadership using NIST SP 800-30 risk assessment methods.

I also bring a security-by-design mindset to emerging technologies and AI-enabled solutions through security architecture reviews, identity and access management evaluations, data protection reviews, and compliance validation aligned with enterprise security standards.

Experience

Work history, roles, and key accomplishments

Current

Information Security Control Analyst

Current

Habyph Consulting Services

Jan 2026 - Present (6 months)

Reviews and validates host and network access controls, performs security testing, and conducts security architecture reviews to support RMF and FedRAMP authorization activities. Executes NIST SP 800-30 risk assessments and validates remediation and POA&M lifecycle items using evidence-based testing.

NIST 800 53 RMF FedRAMP Active Directory RBAC MFA Security Architecture Review ACAS Nessus IAM Privileged Access Management Incident Response Validation Cloud Security Emerging Technology AI Security Reviews

Information Security Control Assessor

SOAL Technologies

Mar 2025 - Oct 2025 (7 months)

Assesses security artifacts (SSP, SAR, POA&M, and evidence packages) against 3PAO standards and performs control assessments for AWS-hosted Medicaid systems. Uses Inspect, Interview, and Test procedures to validate technical, operational, and management controls and supports ATC decision activities.

SSP SARs AWS Authority To Connect (ATC)IAM RBAC PAM Audit Logging Vulnerability Management SIEM Inspect Interview Test (IIT)ACAS Nessus Access Provisioning Cloud Architecture Data Flow Boundary Reviews

Information Security Assurance Analyst

US Tech Solutions

Jul 2023 - Dec 2024 (1 year 5 months)

Conducts security risk assessments and control evaluations across enterprise systems, developing SAPs and SARs aligned with NIST, SOX, PCI DSS, and SOC 2 frameworks. Performs control testing and documentation to support RMF authorization activities and audit readiness, including Salesforce security assessment.

NIST 800 53 RMF SAP SARs Security Assessments Controls Testing Gap Analysis System Authorization Boundaries Salesforce Security Profiles Permission Sets Sharing Rules MFA Audit Logging Threat Analysis SOX PCI DSS SOC Compliance Reporting

Information Security Control Analyst

MBO - PWC - Amazon Services

Jun 2021 - May 2023 (1 year 11 months)

Supports security accreditation by reviewing authorization packages and performing control assessments and risk analysis across FedRAMP, FISMA, and SOC 2 frameworks. Conducts continuous monitoring and incident analysis using SIEM/EDR tools and validates evidence for control effectiveness and compliance.

FedRAMP FISMA SOC Authorization Risk Analysis Monitoring SIEM EDR Identity And Access Management Segregation Of Duties Controls Audit Logs Security Assessments

Cybersecurity Control Assessor

Forest Solutions

Jul 2020 - May 2021 (10 months)

Conducts cybersecurity control assessments for fintech and cloud environments by validating management, operational, and technical controls against NIST SP 800-53. Performs evidence validation and control traceability, supporting SAR and POA&M documentation and RMF/FedRAMP alignment.

NIST 800 53 RMF FedRAMP SARs Technical Artifacts Screenshot Log Configuration Mapping

Information Security Compliance Analyst

Evolve Mortgage Services

Jan 2019 - Jun 2020 (1 year 5 months)

Performs security authorization reviews and NIST 800-53 control assessments across cloud and on-premises systems. Identifies vulnerabilities, develops risk documentation, and produces compliance reports to support remediation and regulatory alignment.

NIST 800 53 Security Control Assessment Compliance Reporting Cloud Security On Premise

Compliance Security Analyst

Steadfast Home Health

Mar 2016 - Dec 2018 (2 years 9 months)

Conducts risk and compliance assessments against HIPAA, NIST CSF, and ISO 27001 frameworks, supporting access reviews, control testing, and audit activities. Monitors control effectiveness and maintains audit-ready documentation for the security program.

HIPAA NIST CSF ISO 27001 Compliance Assessments Controls Testing Auditing Control Effectiveness & Compliance