Looking for a job

Ugo Onyeabo

@ugoonyeabo

Message

Security Assurance and Risk professional at JPMorganChase who raised security controls compliance from 43.5% to 86.2%.

United States

Message

Accomplished Security Assurance, Risk, and Governance professional with extensive experience leading enterprise-wide security controls assessments, threat modeling and intelligence, audit readiness, 3rd party/supply chain delivery management, and operational resiliency planning across global financial, IT, energy and industrial organizations. 13 year proven track record of improving security controls compliance, scaling threat modeling delivery models, and driving cross-functional remediation under strict audit and regulatory mandates (NIST CSF, NERC CIP, FedRAMP).

At JPMorganChase, I owned and scaled the firmwide Secure Design Review process, validating product and application controls against internal security standards. This raised security controls compliance from 43.5% to 86.2% and reduced non-compliance evidence artifacts by 65%.

Experience

Work history, roles, and key accomplishments

Security Architect, Risk & Controls

JPMorganChase

Nov 2017 - Sep 2026 (8 years 10 months)

Owned and scaled the enterprise-wide Secure Design Review process, elevating security controls compliance by ~100% and reducing non-compliance artifacts by 65% while maintaining zero SLA breaches across 100+ product/application designs. Co-founded the Threat Model Center of Excellence and delivered global practitioner workshops. Also led audit readiness as primary Internal Audit liaison.

Security Design Reviews Threat Modeling Audit Readiness Vendor Governance Business Resiliency Agile Delivery Jira NIST CSF NERC CIP FedRAMP

Security Engineer, Vulnerability Management

MRC Global

Aug 2017 - Dec 2017 (4 months)

Designed and operationalized an enterprise vulnerability management program to identify, prioritize, and remediate legacy technical vulnerabilities. Led cross-functional remediation of the critical SMBv2 Remote Code Execution vulnerability across complex distributed infrastructure.

Vulnerability Management Risk Based Scoping remediation SMBv2 Distributed Systems

Cybersecurity Consulting

Ernst & Young

Jan 2015 - Aug 2017 (2 years 7 months)

Delivered NERC CIP v5 business readiness and compliance support for a major U.S. Power & Utilities client. Led firmware vulnerability discovery and remediation across ~2,000 transmission-system devices and built comprehensive recovery plans.

NERC CIP NIST CSF NIST SP 800 30 FedRAMP Vulnerability Management Policy Authoring Cloud Assessments OT ICS Security

ICS Security (OT Security Liaison)

W-Industries

Dec 2013 - Dec 2014 (1 year)

Served as primary client liaison for Industrial Control Systems security, ensuring operational technology control systems met industry standards. Designed and executed security deployment procedures for offshore assets in compliance with Shell and Chevron standards.

OT Security ICS Security Compliance Deployment Processes Functional Testing Emergency Shutdown Logic