Afolabi Taiwo

An exceptional Information Security expert with a bachelor's degree in Computer Science and an MSc in Cyber Security threat intelligence and forensics from the University of Salford. I have over 4 years of experience driving Information Security & Risk Management Initiatives for leading Tech companies, SAAS, Education and Financial service companies. I'm passionate about integrating risk into IT and business culture and appropriately aligning information security needs with business goals.

Throughout my years in the technology industry, I have worked across several cyber security domains ranging from Governance Risk and Compliance (GRC) to Digital Forensics to Security operations analysis to penetration Testing and Incident Response

I have worked across several cyber security domains ranging from Governance Risk and Compliance (GRC) to Digital Forensics to Security operations analysis to penetration Testing and Incident Response, where I demonstrated success record in:

• Developing, Implementing, and leading comprehensive Information Security programs 
• Designing, establishing, and maintaining Information Security Management System (ISMS), Business Continuity, Disaster Recovery & Emergency Response Frameworks ensuring compliance with industry standards and regulatory and legal requirements.
• Designing and implementing Information Security awareness programs for employees, leading to the development of a security awareness culture.
• Managing vendors, partners, programs, and resources.
• Delivering Information Security & Risk Management projects with time and budget restraints.
• Monitoring and respond to security incidents with Splunk Enterprise (SIEM tools)
• Identifying, prioritising, and managing Security Incidents

• Frameworks / Standards: ISO 27001/27002, NIST CSF, PCI-DSS, OWASP, GDPR, Cyber Essentials.
• Security Operations: Cyber security monitoring technologies, Threat Prevention (IAM, DLP), Threat Detection (SOC, SIEM, EDR, IDS/IPS, WAF), Patch Management, Incident Management (Incident Response, Forensic Investigation, Data Breach Preparation).
• Governance and Compliance: Metric & Reporting, Cyber Maturity Assessment and Gap Analysis, Strategy & Business Alignment, Development of ISMS Policies, Procedures and relevant standards, Disaster Recovery, IT Audit and Assurance.
• Security Architecture: Defence-in Depth, Application Protection, Network Segmentation, Secure Build.
• Cloud technologies: Azure Active Directory, GCP, Office 365.
• Software Design Methodologies: Understanding the phases of the software development life cycle (Waterfall, Agile, Scrum, and Peer-programming).
• Effective Communication Skills: Possess the ability to communicate complex IT issues to a nontechnical person, both verbally and in writing.

University of Salford

Master of Science, Cyber Security threat intelligence and forensics