Larry Ogundiran

Senior Compliance Analyst @Vonage

Holmdel, NJ, US

Manage External Audit Lifecycle: Serve as the primary point of contact for external audit and assessment activities (e.g, PCI DSS, HIPAA, HITRUST, SOC 2). Drive the end-to-end process from readiness to final report, coordinating with internal teams to manage evidence collection, validation, and submission.Oversee Audit Finding and Remediation Management: Manage the remediation lifecycle for internal and external audit findings. Partner with technical and business stakeholders to develop corrective action plans, track remediation progress to completion, and report on status to senior leadership.Govern the Third-Party Risk Management (TPRM) Program: Manage and mature the TPRM program, conducting comprehensive due diligence and ongoing risk assessments for new and existing vendors. Ensure all third parties adhere to established security and compliance standards.Serve as Compliance Subject Matter Expert (SME) for Sales & Customers: Lead the response to customer-facing security and compliance inquiries. Own the process for completing complex security questionnaires (e.g, SIG/SIGQ) and RFP requests, accurately articulating the company\'s security and compliance posture to support the sales process.Develop and Maintain the GRC Policy Framework: Govern the organization\'s library of security and compliance policies, standards, and procedures. Proactively update documentation to align with new business initiatives and evolving regulatory landscapes, ensuring all controls are current and relevant.Design and Monitor Compliance Controls: Proactively identify, assess, and mitigate compliance risks across the organization. Design and implement control monitoring and testing activities to measure control effectiveness, ensure policy enforcement, and reduce violations.

Obafemi Awolowo University

Bsc