Open to opportunities

ROTIMI OMORIWO

@rotimiomoriwo

Message

GRC analyst experienced in IT risk management, audit support, and third‑party security reviews.

United States

Message

What I'm looking for

I am seeking GRC or risk roles where I can manage compliance programs, support audits, coordinate remediation, collaborate cross‑functionally, and grow into advanced audit and risk responsibilities.

I am a Governance, Risk, and Compliance (GRC) analyst with hands‑on experience supporting IT risk management, audit preparation, third‑party security reviews, and remediation tracking across regulated environments.

I have worked with frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and PCI‑DSS, and I maintain control documentation, validate evidence, and manage risk registers to drive compliance and reduce exposure.

In my roles I collaborate closely with Legal, IT, Procurement, and business stakeholders to coordinate remediation, prepare audit evidence, and support regulatory inquiries, having supported both public‑sector and private‑sector engagements.

I am completing an M.S. in Cybersecurity, hold ServiceNow GRC training, and am pursuing CISA/CRISC to further strengthen my audit and risk capabilities while continuing to support compliance programs end‑to‑end.

Experience

Work history, roles, and key accomplishments

Current

GRC Analyst

Current

ExcelMindCyber

Jan 2024 - Present (2 years)

Supported IT governance, risk, and compliance activities across multiple frameworks, validated third-party control evidence, and maintained risk registers and remediation tracking to support audit readiness.

NIST CSF PCI DSS Risk Register Third Party Risk Management Evidence Coordination

Current

Operational Risk & Compliance Analyst

Current

Texas Department of Criminal Justice

Sep 2018 - Present (7 years 4 months)

Supported operational and information security risk monitoring, maintained compliance logs and audit documentation, and coordinated internal reviews to identify control gaps and ensure regulatory adherence.

Compliance Reporting

Database Administrator

NCIA

May 2015 - Dec 2017 (2 years 7 months)

Generated system activity logs and compliance artifacts, assisted with access reviews, and maintained records to support SOX and SOC audit requirements.

Database Administration Audit Reporting System Access Reviews Compliance SOX Compliance SOC

Education

Degrees, certifications, and relevant coursework

University of Houston–Victoria

Master of Science, Cybersecurity

Pursuing a Master of Science in Cybersecurity, currently in progress with coursework focused on cybersecurity principles and risk management.

Adekunle Ajasin University

Bachelor of Business Administration, Business Administration

Completed a Bachelor of Business Administration with studies in business administration and related coursework supporting compliance and operational risk functions.