Looking for a job

Taiwo Olatunji

@taiwoolatunji

Message

GRC Security Analyst at Digiss LLC supporting ISO 27001 readiness, SOC 2, and cyber risk programs.

Nigeria

Message

At Digiss LLC, I support cybersecurity GRC advisory engagements for client organizations, including ISO/IEC 27001:2022 implementation and certification readiness. My work includes gap assessments, Annex A control mapping, Statement of Applicability reviews, evidence validation, and remediation planning.

I also support SOC 2 and other compliance initiatives, conduct risk assessments, and help maintain audit-ready programs using Vanta, Drata, and Protecht. Earlier at Digiss LLC, I worked in security operations, and at Fortisec LLC I conducted OSINT research, threat actor profiling, and threat hunting.

Experience

Work history, roles, and key accomplishments

Current

GRC Security Analyst

Current

Digiss LLC

Jan 2025 - Present (1 year 9 months)

Lead and support cybersecurity GRC advisory engagements for multiple client organizations, including ISO/IEC 27001:2022 implementation, SOC 2 readiness, risk assessments, and compliance monitoring. Administer continuous compliance programs using Vanta, Drata, and other GRC platforms.

ISO 27001 SOC2 NIST CSF CMMC HIPAA GDPR NIST AI RMF Risk Assessment Vanta Drata Protecht Jira Confluence Security Governance Policy Development Internal Audit Third Party Risk Management

SOC Analyst

Digiss LLC

Dec 2023 - Jan 2025 (1 year 1 month)

Monitored, investigated, triaged, and escalated security alerts using SIEM and security platforms including Splunk, Wazuh, Rapid7, and SentinelOne. Responded to incidents, supported forensic investigations, and applied data loss prevention strategies using Netskope and Microsoft Purview.

Splunk Wazuh Rapid7 SentinelOne Netskope Microsoft Purview Incident Response SIEM Data Loss Prevention Threat Intelligence

Cyber Threat Intelligence Analyst

Fortisec LLC

Oct 2022 - Jul 2023 (9 months)

Conducted OSINT research, threat actor profiling, threat hunting, and indicator-of-compromise analysis using MITRE ATT&CK-based methods. Produced executive threat intelligence reports and maintained intelligence documentation and workflows.

OSINT Threat Intelligence Threat Hunting MITRE ATT&CK Reporting