K. Tayo ..

Led comprehensive security and technology risk assessments for PwC advisory clients across financial services, healthcare, technology, and semiconductor sectors. Directed enterprise-wide GRC transformations aligned to COBIT, NIST CSF, and FFIEC standards, improving audit readiness and reducing regulatory findings. Managed SOC 2, ISO 27001, and GDPR certification readiness by coordinating evidence collection and remediation activities with engineering teams.

Managed execution of security risk-based assessments across cloud infrastructure, identity and access management, and critical applications supporting front and back office operations. Led enterprise GRC initiatives including security policy lifecycle management, control design, and enforcement across engineering and product teams. Managed third-party risk across the vendor lifecycle, building risk scoring models and implementing contract-level security requirements for high-risk partners.

Led security, technology risk, and compliance engagements for financial services and technology clients, assessing cloud environments and infrastructure controls against NIST CSF, ISO 27001, SOC 2, and FFIEC requirements. Developed enterprise security strategies and governance frameworks aligned with business objectives and regulatory requirements. Designed and implemented scalable control frameworks across cloud and on-premises environments to support financial reporting and operational resilience.

Conducted comprehensive security assessments and evaluated the design and effectiveness of internal controls across business and infrastructure applications. Led enterprise-wide cybersecurity risk assessments using NIST 800-series standards, delivering board-ready reports with prioritized remediation plans. Managed vendor due diligence, SOC report reviews, and third-party risk assessments for critical vendors, performing gap analyses and residual risk scoring.