Arif Wedderburn

WORK HISTORY

EDUCATION

ABOUT ARIF WEDDERBURN

Most organizations don’t struggle with knowing they have risk. They struggle to close it before it becomes an audit finding, an incident, or an executive escalation. I help enterprise organizations reduce third-party risk, IAM exposure, and compliance gaps by translating security frameworks into practical, business-aligned remediation. My work sits at the intersection of governance, risk, and operational security. I support organizations by identifying control gaps, prioritizing remediation, and helping teams turn frameworks into actionable security improvements. My experience includes: • Vendor Risk Management and third-party security assessments • Supply chain security and operational risk reviews • IAM control validation and access governance reviews • Audit readiness, control testing, and remediation tracking • Risk reporting and leadership decision support I regularly work in environments aligned with ISO 27001, partnering with security, IT, and business leaders to clearly surface risks and drive measurable improvement. I hold ISO/IEC 27001 Lead Auditor and ISO/IEC 42001 Lead Auditor certifications, strengthening my ability to interpret security and AI governance frameworks and support organizations preparing for audits, control validation, and governance maturity. Recent impact includes: • Elevating compliance rates to 97% across vendor and supply chain assessments • Reducing vendor-related vulnerabilities by 40% through targeted remediation • Closing audit findings within SLA across multiple business units • Enabling leadership decision-making through risk dashboards and tabletop exercises I tend to do my best work in complex, vendor-dense environments where security, compliance, and business execution must move together. Open to conversations around GRC, IT Risk, Vendor Risk, Third Party Risk, and Compliance Analyst roles.