Tony Adenipekun

I am a Governance, Risk, and Compliance (GRC) Cybersecurity Analyst with 10 years of experience in IT security & administration. I specialize in identifying, assessing, and mitigating risks while ensuring alignment with frameworks such as ISO 27001, NIST, and SOC 2. I have strong experience in risk assessments, audits, policy development, and vendor risk management.

Known for my ability to translate complex technical issues into clear business insights, thereby effectively bridge the gap between IT and leadership. With a focus on continuous improvement, i help organizations strengthen security, maintain compliance, and build resilience against evolving cyber threats.

ATHABASCA UNIVERSITY, ALBERTA (Cloud Security & GRC Analyst) - Aug 2024 to Date

• Updated cybersecurity policies and procedures with ISO and NIST frameworks.
• Conducted Splunk log audits to maintain compliance with PCI-DSS, HIPAA, and NIST, strengthening organizational security posture.
• Designed Splunk alerts and reports, reducing incident response time while supporting key compliance metrics.
• Enhanced enterprise risk management frameworks through improved control design and monitoring.
• Monitored vendor security KPIs, ensuring adherence to SLA and risk control metrics.
• Led risk assessments and SOX audits, improving internal control efficiency and reducing compliance gaps.
• Managed third-party vendor risk assessments, ensuring compliance with security policies and reducing external access risks.
• Conduct compliance monitoring, audit and policy management.
• Conduct Security awareness training, communication and documentation.
• Monitor, analyze, and triage security alerts from SIEM platform.
• Integrated COBIT and COSO control principles into GRC processes to enhance IT governance alignment and audit readiness.
• Developed and maintained risk management frameworks aligned with SOX, GDPR, and PCI-DSS.
• Enhanced compliance monitoring programs, improving regulatory adherence.
• Supported HIPAA compliance programs across departments, ensuring continued audit readiness.
• Strengthened internal control environments by embedding COBIT-aligned governance into project delivery and vendor engagements.

ATHABASCA UNIVERSITY, ALBERTA (AWS Cloud Security & Systems Administrator) - Sep 2021 to Aug 2024

• Application migration from On-Prem to AWS.
• Enterprise application deployment with AWS CI/CD code pipeline to multiple environments.
• Change management control (Production Environment).
• Administered security and configured user access and limits using Azure identity and Access Management (IAM) by creating new profiles and policies for user management in JSON.
• Managed Active Directory, Microsoft Entra Connect, Single Sign-On (SSO), DNS, DHCP.
• Configure on-prem dataset via Direct Connect or VPN to FSx file system in VPC.
• Infrastructure Security: Implement secure cloud architecture using services like IMA, VPC and Encryption.
• Threat Detection & Monitoring: Utilizing tools like AWS GuardDuty, Security Hub and CloudTrail to monitor anomalies, detect threat and respond to incidents.
• Compliance & Audit: Ensure compliance with industry standards, enforcing security baselines.
• Incident Response: Lead remediation effort to resolve threats and vulnerabilities in cloud resources.
• Experience in identity and access management and threat hunting.
• Deep knowledge of AWS services (IAM, GuardDuty, WAF, Security Hub, API Gateway, CloudWatch & KMS encryption).
• Security & Compliance: IAM Policies, Security Groups, Encryption, Compliance Frameworks (HIPAA, GDPR & PCI DSS)
• Deploy, configure and administer Hyper-V environments, including live migrations and virtual machine management.
• Implement and managed Veeam backup & Replication solutions, including Veeam for Microsoft 365.
• Configuration and administration of Citrix XenApp, VMWare ESXi and HyperV.
• Experience in configuring web application firewall (WAF), VPC NAT instance/Gateway and Network Access Control List (NACL), API Gateway & Security Group Configuration.
• Infrastructure as Code (IaC): CloudFormation, Kubernetes.
• Software update, patch management using WSUS & ManageEngine.
• Monitoring & Logging: CloudWatch, CloudTrail, ELK Stack, SolarWinds.
• Experience in working with SQL databases like MySQL, SQL Server and NoSQL databases like MongoDB, DynamoDB, and Oracle.
• Managed technical documentation in Confluence.
• Managed version control branching and tagging across different environments using SCM tools like Git, GitHub, Subversion (SVN).

▪ Bachelor of Science in Mechanical Engineering

▪ Advance Diploma in Computer Hardware Engineering

▪ Executive PG Program: Cybersecurity

Certifications & Training

• AWS Certified Solutions Architect (Associate)

https://www.credly.com/badges/f31486e8-b155-4acc-ae42-f1e9d33508fd/public_url

• AWS Certified Cloud Practitioner https://www.credly.com/badges/6dbc94d0-12da-4537-9950-deec1a249d85/public_url
• AWS Certified AI Practitioner
• Cisco Certified Network Associate (CCNA)
• Microsoft Certified Professional (MCP)
• Apple Technical Support Specialist.
• HPE 3Par Enterprise SAN storage