Mathew O

About Mathew O

I am a Technology Risk Auditor and GRC Analyst with four years of experience strengthening cybersecurity governance, IT risk management, and audit readiness across financial services and technology environments. I focus on translating complex regulatory and control requirements into clear, sustainable governance practices that enhance security posture and operational resilience.My expertise spans ISO 27001, CIS Controls, NIST CSF, COBIT, COSO, CMMC Level 2, SOX ITGC, SOC 2, IIA/IPPF, PCAOB, and AICPA standards. I’ve managed enterprise risk registers, supported Statements of Applicability, maintained SSP/POA & M documentation, and coordinated end-to-end evidence collection for internal and external audits.I build disciplined Audit & Assurance documentation frameworks aligned with IIA/IPPF & ISACA ITAF, ensuring strong version control, traceability, authentication, and audit ready compliance artifacts that meet regulatory expectations and business objectives.My background includes risk assessments, regulatory compliance, IT audit methodologies, third party risk management, policy governance, security awareness, continuity reporting, and cross functional collaboration with Legal, HR, IT, SecOps, Procurement & other business stakeholders. I bring structure, clarity, and operational rigor to every engagement; whether refining policies, tracking remediation, organizing compliance evidence, or supporting tabletop exercises.I’m driven by a commitment to scalable governance, precise communication, and strengthening the security posture of modern organizations.

Experience

1. Technology Risk Auditor

   RINA

   Sep 2022 — Present

Education

• University of Ado-Ekiti

  Bachelor's degree, Accounting