Yaw Owusu

Security-focused IAM professional with 5+ years of experience designing, implementing, and optimizing enterprise IAM programs across cloud and hybrid environments. Proven track record in automating access governance, strengthening privileged access controls, and driving compliance with SOX, HIPAA, and GDPR. Adept at leveraging zero-trust principles, RBAC, and modern IAM frameworks to enhance security posture and enable secure business growth.

IAM Engineer - CAPITAL ONE - Columbus, OH

(2024-01)

• Designed and maintained enterprise IAM strategy integrating Azure AD, Okta, and SailPoint IIQ, improving access management efficiency by 35%.
• Automated provisioning/de-provisioning workflows for 10K+ user accounts, reducing manual admin effort by 45% and access-related incidents by 30%.
• Enforced RBAC and least-privilege models, reducing excessive entitlements across 200+ applications by 40%.
• Led implementation of MFA and SSO across enterprise cloud platforms, improving authentication security and user experience for 8K+ employees.
• Partnered with internal audit and InfoSec to ensure compliance with SOX, PCI-DSS, and GDPR, achieving a zero non-conformance record for three consecutive audits.

IAM Engineer - BANK OF NEW YORK MELLON - Pittsburgh, PA

(2015-12 - 2023-12)

• Leveraged hands-on experience with IGA, PAM, and AM tools to design scalable IAM architecture.
• Drove innovation by simplifying workflows, optimizing role management, and enhancing automation.
• Provided technical leadership, mentoring, and security guidance aligned with CrowdStrike's Zero Trust mission.
• Streamlined IAM governance processes through Python- and PowerShell-based automation, reducing user access certification cycles by 25%.
• Served as IAM project lead on cross-functional initiatives integrating cloud identity with DevOps pipelines.

M.B.A - Technology and Strategic Management - The Ohio State University

B.S - Computer Information Sciences - College of Allegheny County