Temi Abe

Resourceful Third-Party Security Lead with 3+ years of experience managing end-to-end vendor risk. Proven ability to develop and implement robust TPRM processes, security frameworks, and GRC tool workflows. Expertise in ISO 27001, DORA, and NIS2, with a strong track record of conducting risk assessments, driving remediation, and ensuring compliance. Eager to leverage comprehensive vendor lifecycle management skills to enhance security and resilience for Swift Software.

3rd PARTY SECURITY LEAD at Mambu (2024-04 – Present)

• Spearheaded the development and implementation of a robust Third-Party Risk Management (TPRM) end-to-end process, aimed at identifying, assessing, and mitigating risks associated with third-party vendors, thereby bolstering business continuity and minimising operational disruption.
• Engineered and instituted a vendor security framework, ensuring comprehensive security measures across all third-party engagements.
• Established and managed a central repository to systematically document, assess, and monitor third-party vendors, thereby guaranteeing consistent performance tracking and risk oversight.
• Collaborated closely with departments such as Information Security, Legal, and Procurement to embed comprehensive third-party risk controls throughout the organisation.
• Categorised third-party vendors by risk profile and executed regular control checks and compliance reporting, aligned with industry standards like ISO 27001, DORA, and NIS2.
• Supported business units in the onboarding of new vendors by performing risk assessments and updating the Supplier Management Standard to incorporate emerging risks.
• Monitored adverse media coverage and external developments affecting third parties, scrutinising impacts and reporting findings in accordance with internal protocols.
• Managed the end-to-end lifecycle of third-party relationships, from onboarding through performance evaluation to exit, ensuring continuous adherence to risk and compliance standards.
• Provided regular updates to senior leadership on key third-party risk findings, assessments, and remediation plans to reinforce organisation-wide risk mitigation strategies.
• Oversaw the execution of remediation plans in response to identified risks, coordinating with stakeholders to implement effective mitigation measures and ensuring ongoing compliance.
• Contributed to the Recruitment Process Outsourcing (RPO) and Recruitment Function Outsourcing (RFO) initiatives of our third-party and GRC tool, as well as the automation of third-party end-to-end workflows, streamlining operations for increased efficiency and effectiveness.

3rd PARTY RISK OPERATIONS ANALYST at Prevalent Inc. (2023-11 – 2024-02)

• Coordinated the seamless onboarding of clients by efficiently transferring survey content to the Prevalent cloud-hosted platform.
• Managed the distribution of information risk surveys to third parties as requested by clients, ensuring timely and accurate delivery.
• Delivered first-line support to clients, addressing enquiries by articulating technical concepts to non-technical stakeholders and executing troubleshooting steps.
• Monitored and managed assessment completion rates, employing effective communication channels with third parties to ensure continued progress.
• Collaborated with the Prevalent Professional Services Team to oversee and manage third-party risk remediation activities.
• Conducted onsite audits to evaluate the effectiveness of existing security controls.
• Performed risk assessments in accordance with security best practices and the InfoSec Management framework, encompassing ISO 27001 and PCI DSS along with other information security frameworks.
• Facilitated third-party vendor onboarding and content integration into Prevalent's cloud-hosted platform.

3rd PARTY SECURITY & ASSURANCE ANALYST at Shirey's Infotec (2021-10 – 2023-11)

• Coordinated comprehensive security engagements for diverse business projects, embedding security principles into each phase to ensure the protection of customer, company, and employee data.
• Collaborated effectively with third-party partners to ensure thorough information security due diligence assessments were executed.
• Contributed to the update of security policies and processes, including the Third-Party Security Policy and Information Security Risk Management Policy.
• Conducted onsite audits of third-party entities to assess the effectiveness of existing security controls, ensuring alignment with ISO 27001, NIST, and GDPR requirements.
• Vigilantly reviewed business monitoring feeds to proactively identify potential threats and vulnerabilities.

ADMINISTRATIVE OFFICER at Mimshach Walkway Ltd (2020-12 – 2021-09)

• Prepared comprehensive reports and presentations incorporating statistical data for monthly meetings to support strategic decision-making.
• Utilised data analysis and visualisation techniques to convey key insights, facilitating informed decisions by stakeholders.
• Conducted thorough market surveys to identify demand for services and accurately forecast optimal selling strategies.

Master of Business Administration in Project Management – University of Hertfordshire (2022-02 – 2023-02)

Bachelor of Science in Sociology and Anthropology – Obafemi Awolowo University (2013-09 – 2018-09)