Babatunde Ajayi

About Babatunde Ajayi

Third Party Risk and IT audit analyst with over 6 years of experience in vendor risk management, remediation, assessment product, knowledgeable in security and control risk frameworks, data privacy with special importance in risk management. An accomplished Third-Party Risk Analyst/ Risk Assessor with over 6 years of experience in Cyber Security and good mastery of third-party vendor risk assessment Area of expertise• Data Privacy• PCI-DSS• Human Resource Security• Risk Assessment• Information Security Management • Disaster Recovery • Business Continuity • HIPAA• SOC2 Type2• GDPR• Access Control• SOX• NIST SP 800-53 rev4• SOC2 Type2• ISO 27001• Risk Management• Compliance• End Use Device Security• Application Security Possessed great knowledge in managing risk properly and understanding security requirements by supporting and monitoring the security posture of the business, including managing endpoint security, creating policy and procedure such as incident response, incident remediation, change management and Third-Party Risk Management program. proactive, dynamic, detail oriented, good listener, fast learner with good documentation skills, comfortable working in a team and independently with ability to adapt in diverse environments. Effective in Vendor Risk Mgmt, Assessment and Authorization, Vulnerability Mgmt and Patch Mgmt. Vendor classification as well as vendor selection. A result-driven professional with hands-on experience in analyzing SOC reports, security documentations and evidence, risk assessment reports and risk treatment plan. Adapt in compliances review, policies creation and audit support. My goal is to maintain Confidentiality, Integrity Availability, and Privacy.

Experience

1. Tpra Data Privacy Analyst

   Laketech Solution Llc

   Dec 2023 — Present · Dallas, TX, US

   Lead and manage the third-party risk assessment process, ensuring the identification and mitigation of potential security risks posed by external vendors.• Assisted in the development and implementation of security controls to address identified risks and vulnerabilities.• Third-Party Adherence Advisors work with business partners engaged with Suppliers to ensure adherence to the third-party Risk Management (TPRM) framework, as well as the Sourcing and Purchasing Policy requirements.• Coordinated Risk assessment lifecycle from pre-assessment to remediation.• Ensure necessary assessments are tracked to completion and risk awareness / acceptance / escalation steps are taken.• Reviewed organization external regulatory reports and compliance audits including SOC Reports, PCI-DSS, HITTRUST, and ISO other evidence provided during assessment.• Mitigating control to meet to meet regulatory requirement specifically SOX, CCPA, GDPR, HIPPA, PCI-DSS• Prepared and presented detailed reports on security findings, risk assessments, and recommendations to senior management.• Advise and educate Service Managers and Business Partners to increase risk awareness and enforce adherence to TPRM Framework requirements.• Conducted vendor reviews by engaging in kickoff/IRP call with business units to gather information about TPP and sent /review Scoping documents from the BURM to determine the inherent Risk before launching out questionnaires to vendors for completion.• Conduct privacy impact analysis to determine privacy compliance status for cloud solutions with PII’s based on regulatory definition compliance with general Data protection Regulation, tested for the operating effectiveness of IT security controls in cloud vector environment.• Provide guidance and advisement as well as effective challenges, where needed, to Service Managers, and Business Partners as relates to TPRM program adherence and execution.

Education

• Crown Polytechnic

  Bachelor's degree, Business Administration