Oluwaseun Olalekan
Information Security Analyst a & a Analyst Information System Security Officer (Isso) @Px Connect
Signup · Get unlimited contacts
WORK HISTORY
Information Security Analyst a & a Analyst Information System Security Officer (Isso) @Px Connect
worked on projects such as mapping frameworks such as NIST 800-53 and ISO 27001, risk and compliance, risk mitigation strategies, policy design, internal and external audits and I developed remediation planning and action items for multiple business units. I have conducted several privacy impact assessments, data governance risk assessments and third-party risk assessments. I have been instrumental in carving out cyber strategy and resilience for many organizations.\\\\nPerforming Information System Audits by reviewing information system policies, application controls, database controls, datacenter, network and endpoint devices, emails, outsourcing, business continuity plan and incident management plan, desktop, user awareness, industry standards (PCI-DSS, Sarbanes-Oxley, HIPAA) for compliance/non-compliance.\\\\n Recording my audit finding in the audit report.\\\\n Updating information security policies.\\\\n Performed security categorization using NIST SP 800-60 and FIPS 199 and reviewed Privacy Threshold Analysis (PTA) and Privacy Impact Assessment (PIA), and E-Authentication with system stakeholders.\\\\n Select security controls using NIST SP 800-53 and FIPS 200.\\\\n Assessing security controls using NIST SP 800-53A to ensure the security controls selected were implemented correctly.\\\\n Prepared, updated and maintained RMF documentation such as, but not limited to, ATO packages, SSPs), SARs, POA & Ms and Security Control Traceability Matrixes (SCTM) for all networks and systems. Sending out Inherent Risk Questionnaire to Vendors to determine the Inherent Risk Rating (IRR).\\\\n Performing Due Diligence by sending out Due Diligence Questionnaire (DDQ) to vendors to determine the overall control effectiveness on compliance risk, operational risk, strategic risk, cyber risk, subcontractor risk, reputational risk, concentration risk.\\\\n Using GRC tool ServiceNow.\\\\n Provide guidance and operational management for third party security and compliance programs.\\\\n\\\\n
EDUCATION
Comptia
Security plus
University of Ghana
Bachelor's degree, Information Technology
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.