Olanrewaju O.

Senior Cybersecurity and Compliance Analyst @Aspinwood Consulting

Perform regular vulnerability assessments and penetration testing to pinpoint weaknesses in systems and applications. Identify vulnerabilities, analyze and interpret threats and malicious activities, and develop risk mitigation strategies. Monitor security systems such as SIEM, IDS/IPS, SOAR, using network monitoring tools for suspicious activities and potential security incidents. Employ and maintain patch management processes to ensure systems remain updated with security patches and align with regulatory requirements and organizational security information policies. Integrate robust internal controls and data security measures to fortify systems against potential risks.• Developed security policies, procedures, and documentation to assure compliance with industry standards and regulations such as NIST, PCI-DSS, ISO 27001, SOC1, SOC2, GDPR, SOX, CIS, HiTRUST, FedRAMP, COBIT, and HIPAA.• Evaluated third-party vendors, assessed their security posture and risk exposure, and established and maintained relationships with third-party vendors, by showcasing exceptional co-ordination and leadership• Conducted in-depth malware analysis and IOC to identify malicious behavior, reverse-engineer binaries, and develop mitigation strategies, enhancing system security and threat detection capabilities• Conducted incident investigations and digital forensics to identify root causes of security incidents utilizing a root cause analysis and dashboard management, while maintaining a strong focus on reliability and analytics.• Prioritized and remediated identified vulnerabilities based on risk assessment and severity, focused on operational excellence and aligning actions with organizational goals and compliance requirements, ensuring clarity in communication.• Designed and implemented security measures to protect cloud-based systems and data by configuring access controls, encryption, network security, and other protective mechanisms.