Bolu Owode

WORK HISTORY

EDUCATION

ABOUT BOLU OWODE

AboutCybersecurity Analyst with over 5 years of experience across security operations, GRC support, and privacy-related initiatives in high volume enterprise environments. I bring hands-on expertise in alert triage, incident response, threat investigation, and increasingly, the governance and risk processes that enable effective, sustainable security programs.I have worked cross-functionally with SOC teams, engineers, and stakeholders to align investigations with broader compliance goals ensuring incidents are not only resolved but documented in a way that supports audit readiness, root cause prevention, and control testing. I am now expanding my impact in roles that combine technical analysis with GRC, privacy, and policy-focused work. Notable Security & GRC Contributions:Incident Resolution: Investigated and closed 100+ high- and medium severity alerts using Microsoft Defender and Elastic Security, accelerating mean time to resolution by 35% while ensuring documentation met internal compliance standards.False Positive Reduction: Contributed to tuning SIEM rules and refining detection logic, reducing false positives by 40% and improving SOC efficiency, aligning operational output with risk management priorities.Risk Communication: Produced executive ready investigation summaries and shift handover reports that improved visibility into phishing trends, login anomalies, and endpoint behaviour, supporting both detection and risk assessment activities.Policy-Process Link: Collaborated on phishing response workflows that incorporated user education and control feedback, reducing recurrence and aligning incident handling with organisational security policy.🧩 Security & GRC Strengths:• Real-time threat detection across SIEM/EDR platforms• Communicating security risk in clear, stakeholder-friendly terms• Understanding and applying control frameworks (ISO 27001, NIST 800-53, SOC 2)• Supporting documentation, audit preparation, and compliance workflows• Bridging technical findings with broader business risks and regulatory obligations Technical Tools:Elastic Security, Microsoft Defender for Endpoint, IBM QRadar, Sumo Logic, Splunk, CrowdStrike, ServiceNow, Azure Security Center, Jira, Confluence Core Competencies:Alert Triage & Investigation | Threat Detection & Risk ReductionSecurity Awareness & Phishing Response | SIEM/EDR InvestigationGovernance, Risk & Compliance Support | Control ImplementationAudit & Documentation Readiness | Privacy Principles (HIPAA, PHIPA)MITRE ATT & CK Mapping | Cross-Functional Communication