Dayo Emmy

Accomplished Governance, Risk, and Compliance (GRC) professional with over 10 years of experience specializing in third-party risk management, compliance, and enterprise risk programs. Proven track record of conducting over 150+ vendor assessments annually, reducing onboarding risk by 30%, and streamlining due diligence workflows. Skilled in leveraging frameworks such as NIST 800-53, ISO 27001, HIPAA, and SOC 2 to drive audit readiness and ensure regulatory compliance.

Adept at collaborating with cross-functional teams to enhance security posture, mitigate risks, and deliver executive-level reporting that supports informed decision-making.

Sr. GRC and Third-Party Risk Analyst - Tokio Marine HCC - Houston, TX

(2023-10)

• Spearheaded enterprise GRC initiatives including IT/OT controls, vendor risk management, legal/compliance management, and issue tracking.
• Administered AuditBoard GRC platform, maintaining vendor controls and ensuring realtime accuracy of compliance data.
• Conducted internal audits, identified compliance gaps, and implemented corrective measures, reducing audit findings by 25%.
• Oversaw vulnerability management program—driving risk identification, prioritization, and remediation, reducing critical vulnerabilities by 40%.
• Directed internal audits for GLBA, PCI-DSS, ISO 27001, and NYDFS, achieving 100% external audit readiness across 5 consecutive audits.
• Delivered quarterly risk reviews and executive briefings to senior leadership, enabling risk-informed decisions on vendor contracts.

Sr. GRC and Vendor Analyst - University of Colorado - Aurora, CO

(2021-01 - 2023-09)

• Lead end-to-end Third-Party Risk Management lifecycle including vendor selection, profiling, assessments, SLA monitoring, and offboarding, reducing vendor onboarding time by 20%.
• Execute 150+ vendor risk assessments annually, ensuring alignment with FERPA, HIPAA, GLBA, SOX, PCI-DSS, NACHA, and SOC 2 requirements.
• Develop risk stratification models assessing inherent and residual risks across IT/OT systems, improving risk visibility for senior leadership.
• Create System Security Plans (SSPs) aligned with NIST 800-53 and 800-171, supporting compliance readiness across internal university systems.
• Direct enterprise GRC programs covering HIPAA, NIST, ISO 27001, CCPA, SOC strengthening regulatory compliance and audit performance.
• Collaborate with department heads to establish compliance frameworks and governance models, clarifying organizational workflows for risk accountability.
• Administer the GRC tool, overseeing access control, patch management, and system configuration, while acting as the primary liaison between the organization and thirdparty software provider.

Third-Party Risk and Compliance Analyst - Insight Tech Consulting Group - Austin, TX

(2017-02 - 2020-12)

• Managed end-to-end third-party risk assessments across vendor onboarding and continuous monitoring processes.
• Performed inherent and residual risk assessments of vendors and cloud solutions, achieving 95% compliance for critical security controls.
• Collaborated with Legal and IT teams to ensure compliance with global data privacy regulations (GDPR, HIPAA).
• Oversaw SOC reports (SSAE 18, SOC 1/2/3), ensuring vendor adherence to security and compliance standards.
• Supported audits and regulatory examinations, ensuring timely submission of compliance documentation and reducing deficiencies by 20%.

IT Auditor - Amegy Bank of Texas - San Antonio, TX

(2015-06 - 2017-02)

• Conducted IT audits covering security, access controls, disaster recovery, and business continuity planning.
• Performed third-party vendor security assessments for 10+ key partners, ensuring compliance with IT security and regulatory standards.
• Led SOX compliance testing for 50+ IT controls, reducing audit deficiencies by 20%.
• Prepared and presented 10+ detailed audit reports to senior management, improving organizational security posture by 30%.

Master of Science - Cybersecurity - Grand Canyon University

Bachelor of Science - Histotechnology - University of Texas