Theophilus Irianan

About Theophilus Irianan

As a Senior Consultant, I specialize in DevSecOps, Cloud Security, and Governance, Risk & Compliance (GRC) and Audit Management delivering secure, scalable, and compliant solutions that enable enterprise transformation. With over a decade of hands-on experience across AWS, Azure, and hybrid environments, I bridge the gap between development agility and enterprise-grade security.I lead initiatives that embed security-by-design across CI/CD pipelines, automate compliance controls, and align DevOps workflows with frameworks like NIST, ISO 27001, CIS, FedRAMP, and CMMC. My work drives measurable outcomes from reducing deployment friction and audit findings to accelerating time-to-ATO and improving cloud posture visibility. Core ExpertiseDevSecOps & DevOps Automation: CI/CD pipeline security (GitHub Actions, Jenkins, GitLab, Azure DevOps) and IaC hardening (Terraform, Ansible).Cloud Security Architecture: Designing zero-trust, multi-cloud security architectures leveraging AWS and Azure Security stack.GRC & Compliance Enablement: Implementing automated evidence collection, policy mapping, and risk quantification for regulatory frameworks.Architecting & Enforcing Secure Cloud Infrastructure: Aligned with NIST 800-53, ISO 27001, FedRAMP, CMMC, and DoD IL frameworks.Threat Modeling & Security Engineering: SABSA-aligned design and continuous monitoring integrations.Cross-Functional Leadership: Partnering with developers, auditors, and business stakeholders to align controls with business outcomes.Cloud Readiness & Compliance: Conducting gap analyses, ATO preparation, and audit support for FedRAMP High, IL5/IL6, and ISO 27001 initiatives. CertificationsCISSP | CCSP | CISM | CISA | PMP | SABSA SCF | AWS Certified (3x)| Microsoft Azure Certified (3x) What I DeliverCompliance and Audit Management DevOps and DevSecOps deployments across single and multiple tenants Secure cloud migration and automation at enterprise scale End-to-end GRC program implementation and readiness assessments Continuous compliance and DevSecOps integration Risk-driven security architecture aligned with business goals

Experience

1. Cybersecurity Technical Leader

   Cisco

   Oct 2024 — Present

   Conducted FedRAMP security assessments for cloud service providers, evaluating NIST 800-53 Rev. 5 control implementations across AWS and Azure environments to support ATO authorization.Managed full POA & M lifecycle, analyzing vulnerability scans, STIG findings, configuration baselines, and evidence artifacts to verify remediation and compliance.Assessed system architecture, inherited controls, and authorization readiness, producing executive risk summaries, compliance dashboards, and remediation timelines.Improved FedRAMP assessment efficiency by 20% through standardized POA & M reporting processes, reducing assessor rework and review cycles.Validated DISA STIGs, NIST 800-53 controls, and federal mandates via evidence review, control testing, and architecture security evaluations (identity federation, encryption key management, cloud identity governance).Led gap assessments, remediation planning, and authored/maintained SSPs, POA & Ms, Continuous Monitoring Plans, Incident Response Plans, and other FedRAMP documentation.Collaborated with system owners and engineering teams to prepare for security authorization reviews and sustain ongoing compliance.

Education

• Georgia Institute of Technology

  Master of Science - MS, Cybersecurity (Information Security track)

• University of Central Missouri

  Master of Science - MS, Engineering/Industrial Management

• University of Benin

  Bachelor of Engineering - BE, Petroleum Engineering

• Dakota State University

  Doctor of Philosophy - PhD, Information Systems