Kolawole Balogun

Results-driven Information Security Compliance, GRC & Programme Manager with over 7 years of leadership experience in statutory compliance, risk management, framework enforcement, and operational governance. Certified ISO 27001 Lead Implementer and Lead Auditor expertly bridging physical asset security controls with digital Information Security Management Systems (ISMS). Proven track record of managing large-scale infrastructure compliance portfolios, executing rigorous risk assessments, auditing multi-site environments, and implementing corrective action plans.

Highly skilled in third-party vendor risk management, policy governance, and steering senior stakeholders through audit readiness to strengthen organizational resilience and regulatory assurance.

COMPLIANCE & PROGRAMME MANAGER - The Open University - Milton Keynes

(2024-03)

• ISMS & Control Alignment: Lead the strategic delivery of compliance and risk governance across a complex estate of 80 national buildings, mapping operational facilities against ISO 27001 physical security standards.
• Audit Readiness & Assurance: Direct continuous compliance assurance programmes, establishing robust evidence-gathering vaults to maintain accurate, 100% audit-ready statutory and security records.
• Asset Risk Governance: Design and maintain statutory maintenance asset registers, utilizing data dashboards and risk registers to provide senior leadership with strategic risk visibility.
• Third-Party Risk Management: Monitor external vendor performance against strict legislative and contractual timelines, mitigating supply chain vulnerabilities through targeted corrective actions.
• Incident & Problem Management: Provide strategic technical advice on compliance matters, leading root-cause incident investigations to continually harden corporate operational resilience.

BUILDING MANAGER - Cushman & Wakefield - Hatfield

(2023-06 - 2024-03)

• Physical Security & Operational Control: Managed operational risk and statutory compliance for a multinational commercial office portfolio spanning six multi-tenant installations.
• Third-Party Vendor Risk: Supervised multi-million-pound contract ecosystems, auditing vendor delivery through performance metrics, KPIs, and security SLAs to guarantee safe, compliant service execution.
• Reporting & Governance: Produced comprehensive compliance, financial, and operational risk metrics reports for corporate clients to facilitate senior-level governance and risk sign-offs.

FACILITIES MANAGER - Thalia Waste Management (Milton Keynes Council)

(2021-09 - 2023-06)

• Contract Risk Governance: Chaired the strict compliance and risk delivery for 24 distinct service contracts and critical infrastructure contractors across six high-risk regional operating sites.
• Risk Assessment Frameworks: Spearheaded full-scale site risk assessments, method statements (RAMS), and technical compliance checks, significantly dropping operational security liabilities.
• Stakeholder Engagement: Acted as the core compliance liaison between municipal council authorities, external inspectors, and corporate leadership to enforce baseline operational security.

BUILDING MANAGER - Guarding UK - Milton Keynes

(2019-05 - 2021-09)

• Emergency Preparedness & BCP: Formulated and tested emergency preparedness, physical access control monitoring, and incident mitigation routines to ensure uninterrupted business continuity.
• Site Compliance Audits: Conducted rigorous health, safety, and physical facility security audits across three commercial complexes, tracking non-conformances through to resolution.

HND & OND - Business Studies - Higher National Diploma (2004)