Looking for a job

Tolulope Masominu

@tolulopemasominu

Information security leader at Emirates Airlines who coordinated portfolio security assurance and assessed AI governance risks.

Canada

Message

At Emirates Airlines, I coordinated security assurance across an enterprise product portfolio, tracking risks and control gaps and supporting remediation. I also assessed cloud services, applications, infrastructure, third-party vendors, and the security and privacy implications of emerging AI technologies.

At World Vision Canada, I led cybersecurity programs spanning risk management, business continuity, third-party reviews, and PCI DSS compliance. I created SharePoint-based tools and a procedural calendar that helped simplify the annual PCI DSS audit, and introduced engaging security awareness activities.

Earlier, I supported IT audit and security work at ExxonMobil Chemical Company and Imagine Integrated Systems, and directed digital banking security at United Bank for Africa Plc. My work included access control audits, vendor assessments, mobile banking security, and IT governance frameworks including NIST, ISO 27001, COBIT, and COSO.

Experience

Work history, roles, and key accomplishments

Senior Cybersecurity Portfolio Assurance

Emirates Airlines

Apr 2026 - Jul 2026 (3 months)

Coordinated security assurance activities across enterprise product portfolios, ensuring alignment with security standards and compliance requirements. Integrated outputs from specialist cybersecurity teams and led risk assessments for cloud services, applications, and third-party vendors.

Security Assurance Risk Assessment Compliance Cloud Security AI Governance Stakeholder Management

Information Security Specialist

World Vision Canada

Sep 2021 - Nov 2025 (4 years 2 months)

Defined and executed enterprise-wide security strategies aligned with global standards, developing policies for GDPR, CCPA, and AI adoption. Led end-to-end cybersecurity programs including risk management, BCP/DR planning, and third-party security reviews, and directed PCI DSS certification.

Cybersecurity Strategy Risk Management PCI DSS GDPR CCPA DR BCP Third Party Risk Security Awareness Agile Secure SDLC

Business Systems Support – IT Special Projects

ExxonMobil Chemical Company

May 2018 - Sep 2021 (3 years 4 months)

Executed cybersecurity and access control audits across critical logistics and operational environments, reducing privilege creep and strengthening least privilege. Supported Business Continuity Planning through asset classification and business impact analyses.

Cybersecurity Audit Access Control NIST ISO 27001 PCI DSS HIPAA GLBA GDPR Business Continuity Planning

Digital Banking Manager

United Bank for Africa Plc

Sep 2013 - Oct 2017 (4 years 1 month)

Assessed and enforced third-party compliance with PCI DSS, GDPR, and HIPAA for digital banking vendors, reducing supply chain risk. Directed security for mobile banking systems, integrating risk analysis throughout the SDLC and conducting infrastructure audits.

PCI DSS GDPR HIPAA Third Party Risk Mobile Banking Security SDLC UAT Infrastructure Audits Security Awareness Phishing Simulations UTM

IT Audit & Security Associate

Imagine Integrated Systems

Mar 2007 - Aug 2013 (6 years 5 months)

Led audits of IT and business processes using COBIT and COSO frameworks, assessing control effectiveness and delivering actionable insights. Evaluated third-party engagements for security and compliance, and advised clients on cloud adoption and disaster recovery planning.

IT Audit COBIT COSO Risk Assessment Third Party Risk Cloud Adoption Disaster Recovery Access Control