Olumide Asubiojo

Highly effective and well-rounded professional with deep dive experience in governance, risk, and compliance (GRC) analysis and management. Expertise in crafting impactful risk management, disaster recovery, and remediation plans and strategies to support business continuity and risk profile improvement. Reliable, with verifiable year-after-year success in leveraging project management expertise to guide risk assessments, vendor audits, and gap analysis.

Recognized for conducting risk-focused trainings, defining and implementing new controls, and developing internal cultures centered around data, operational, and cybersecurity. Skilled at monitoring trends and regulatory changes.

Stellantis Financial services, Dallas, TX.

GRC ANALYST, July 2022 to Present

• Play an integral role in strengthening the security and compliance of key systems, processes, and operations by conducting cybersecurity/risk assessments and compliance audits spanning financial security, incident management, endpoint security, logging/monitoring, mobile device security, threat and vulnerability management, Windows, Active Directory, and other systems and operational areas.
• Spearhead the planning, development, and execution of NIST cybersecurity framework (CSF) gap analysis initiatives spanning five high-level functions, directly contributing to the proactive identification and resolution of IT and cybersecurity gaps, issues, risks, and vulnerabilities.
• Strengthen alignment between Stellantis Financial requirements and multifactor authentication (MFA) policies, including liaising with stakeholders to gather requirements and address needs.
• Align objectives and bridge communications with compliance, legal, QA, IT, and other cross-functional teams to define controls and craft comprehensive risk mitigation strategies.
• Employ project management expertise to guide the seamless execution of internal and external audits and control reviews, including liaising with stakeholders, facilitating meetings, and collecting paperwork.
• Support transparent communication, improvement, and informed decision-making by preparing and presenting detailed reports, findings, and recommendations to senior leadership and stakeholders.
• Plan and conduct organization-wide compliance and security trainings on a regular basis.
• Research and recommend new technologies to support improved information and data security.
• Deliver training, mentorship, and support to new and existing GRC team members.
• Adapt to quickly changing priorities with expertise while addressing high-level and critical issues.

Barclays Bank, Wilmington, DE.

GRC ANALYST, OCTOBER 2016 to June 2022

• Assessed, evaluated, and made recommendations regarding the adequacy of the security/ IT controls for the client's environment and business objectives,
• Developed policies, procedures, and processes based on audit findings and/ or compliance framework requirements,
• Cross walked controls across multiple security compliance frameworks and regulation to foster adoption and identify gaps,
• Translated security analyses, audit results, and compliance guidance into more understandable and actionable format,
• Continuously analyzed and suggested improvements for security/ IT controls in both design and operation effectiveness,
• Developed risk registers, ideally aligned to controls, and executed basic risk assessment and management practices,
• Managed the documentation, prioritization, and tracking of items such as the risk register, evidence collection, and major security improvements to the company’s Security Program,
• Performed assessments (risk and/or compliance) to develop a baseline for creating or expanding a security program,
• Developed plans and tracking for non-compliance with applicable controls, and monitoring remediation progress against agreed upon timelines,
• Worked with various client GRC tools Such Archer & other custom tools,
• Performed data analysis and manipulation as needed to analyze a problem and create a solution for our clients,
• Evaluate new and existing technologies for compliance with information governance controls (e.g., access, authentication, encryption, logging, retention),
• Performed other duties as assigned to best serve our clients in their security, risk, compliance, or GRC programs,
• Lead process improvement initiatives, collaborating with key customer sponsors and stakeholders to define and deploy best practice GRC processes, addressing gaps and identifying solutions across people, process, and technology.

BSc Finance, Bowen university.

MBA Business Technology Management, Wilmington University.