# K. Tayo ..

**Senior Security Engineer Manager** — Washington, DC 5718884214, @kgbohunmi

> Security and risk leader with expertise in enterprise security risk management, compliance programs, and GRC transformation across financial services, healthcare, and technology sectors.

## Links

- LinkedIn: https://linkedin.com/in/k-tayo-229148b7/?isSelfProfile=true

## Experience

### Senior Security Engineer Manager, Eliassen (PricewaterhouseCoopers) (2024-08 – present)
New York, United States · Led comprehensive security and technology risk assessments for PwC advisory clients across financial services, healthcare, technology, and semiconductor sectors. Directed enterprise-wide GRC transformations aligned to COBIT, NIST CSF, and FFIEC standards, improving audit readiness and reducing regulatory findings. Managed SOC 2, ISO 27001, and GDPR certification readiness by coordinating evidence collection and remediation activities with engineering teams.

### Assistant Vice President, Technology Risk & Compliance (GRC) Services, State Street Bank (2022-04 – 2023-12)
Boston, Massachusetts, United States · Managed execution of security risk-based assessments across cloud infrastructure, identity and access management, and critical applications supporting front and back office operations. Led enterprise GRC initiatives including security policy lifecycle management, control design, and enforcement across engineering and product teams. Managed third-party risk across the vendor lifecycle, building risk scoring models and implementing contract-level security requirements for high-risk partners.

### Security Assurance & Advisory GRC, BDO USA (2021-02 – 2022-04)
Remote · Led security, technology risk, and compliance engagements for financial services and technology clients, assessing cloud environments and infrastructure controls against NIST CSF, ISO 27001, SOC 2, and FFIEC requirements. Developed enterprise security strategies and governance frameworks aligned with business objectives and regulatory requirements. Designed and implemented scalable control frameworks across cloud and on-premises environments to support financial reporting and operational resilience.

### Senior Risk and Compliance, Imitor Group (2017-01 – 2021-02)
Columbia, Maryland · Conducted comprehensive security assessments and evaluated the design and effectiveness of internal controls across business and infrastructure applications. Led enterprise-wide cybersecurity risk assessments using NIST 800-series standards, delivering board-ready reports with prioritized remediation plans. Managed vendor due diligence, SOC report reviews, and third-party risk assessments for critical vendors, performing gap analyses and residual risk scoring.

## Education

### M.Sc. Technology Audit and Cyber Risk, Temple University

### B.Sc. Accounting, Temple University

### Undergraduate, Obafemi Awolowo University (OAU)

## Skills

CUBE RegPlatform Enterprise: the end-to-end regulatory change management. Purpose-built., SOC 1, SOC II, HIPAA, Process Review, Operational Audits, IT Audit, SOX 404 Top–Down Risk Assessments (TDRA), Auditing, Sarbanes-Oxley Act, Internal Controls, Internal Audits, IT Risk Assurance, PCAOB, COBIT, Operational risk, Technology Risks, Internal External audit, Digitial, Compliance & Regulatory Risks, Enterprise Risk Management, Operational Risk Management, IT Risk Management, Risk Analysis, Windows, McAfee, Linux, Business Process Improvement, Oracle Applications, Oracle SQL Developer, Oracle Business Intelligence Enterprise Edition (OBIEE), Information Technology Service Management, Disaster Recovery, Digital Forensics, Software Testing, Strategic Planning, Software Development Life Cycle (SDLC), Management Consultancy, Microsoft Office, Accounting, Nist, Security Risk Management, Continuous Monitoring, ISO 27001, PCI-DSS, NIST CSF, NIST 800-53, Compliance Assessment, Issue and Remediation Lifecycle Management, GRC Program Execution, Regulatory Compliance, Cybersecurity Risk Management, Security Risk Transformation, Technology Strategy, Risk Governance, Risk Trend Analysis, Identity and Access Management, Privileged Access Management, Cloud Security, AWS, Azure, GCP, Incident Response, Third-party Risk Management, Vendor Risk Scoring, FFIEC, GDPR, Application Security, Infrastructure Security, Change Management, Vulnerability Remediation

## Credentials

- **CRISC** — ISACA
- **CISA** — ISACA

---
Source: https://saywise.com/member6646 (last modified 2026-10-06T02:20:24.181Z)