Oluwafemi Agbayewa

About Oluwafemi Agbayewa

I have extensive experience in leading security assessments within cloud-based environments in accordance with FedRAMP, FISMA, NIST SP 800-53, 800-37, OMB, and other authoritative IT security guidance, interpreting compliance standards, and identifying and documenting issues related to compliance activities. I have a strong understanding of FedRAMP requirements and have worked closely with technical teams to execute and monitor controls related to compliance initiatives. I have also developed and maintained IT Governance, Risk, and Compliance strategies and internal procedures to ensure information security and have conducted compliance assessments of controls for in-scope systems, including remediation assessments and audit-readiness assessments. Additionally, I have experience in continuous monitoring activities and tracking control health metrics, as well as supporting evidence collection and documentation for internal and external audits, including FedRAMP assessments. I have developed and implemented Security Assessment Plans, identified and performed reviews of FedRAMP security controls, and assisted with the Life Cycle Assessment and Authorization process through my strong understanding of NIST guidelines and FedRAMP requirements.

Experience

1. Fedramp Government Compliance Specialist

   Amazon Web Services (AWS)

   Aug 2024 — Present · Arlington, VA, US

   Lead end-to-end POA & M lifecycle management for AWS FedRAMP GovCloud and EastWest regions with 100% on-time delivery• Design and drive scalable GRC processes ensuring compliance with FedRAMP, NIST 800-53 and other regulatory frameworks• Spearhead AWS Automation initiative using Xacta 360. Leading enterprise-wide GRC platform implementation that reduced partner team delivery time and improved artifact submission to our Authorizing Official• Build and maintain compliance certifications by conducting control assessments, identifying gaps, developing remediation strategies, and driving activities to completion• Develop automation solutions using Python to enhance continuous monitoring, vulnerability management, and audit evidence collection processes• Maintain FedRAMP authorization packages including System Security Plans (SSP), Security Assessment Reports (SAR), and Plans of Action & Milestones (POA & M)• Conduct compliance assessments and vulnerability assessments using NIST 800-53A guidance, performing root cause analysis and identifying trends for process improvement• Serve as subject-matter expert on FedRAMP requirements, partnering with technical teams to execute and monitor controls in complex cloud environments• Support Assessment and Authorization (A&A) processes for information systems, developing Security Assessment Plans (SAP) and completing comprehensive test plans• Collaborate cross-functionally with engineering, security, legal, incident response, and business teams to align evidence with controls and ensure audit readiness• Perform continuous monitoring activities, track control health metrics, and interface with FedRAMP customers and DOD• Monitor emerging FedRAMP and GovRAMP guidelines to proactively update processes and maintain regulatory alignment

Education

• Command Secondary School Apata, Ibadan, Oyo state

  High School Diploma, Science

  2004 — 2010

• Howard Community College

  Associate's degree, Biology/Biological Sciences, General

  2012 — 2014

• University of Maryland Global Campus

  Master's degree, Cybersecurity

• Salisbury University

  Bachelor of Science - BS, Biology/Biological Sciences, General

  2014 — 2018