Oluwatoyosi Adeoye

• Provide strategic cybersecurity, governance, and risk leadership across the enterprise, aligning controls with ISO 27001, NIST CSF, NIST 800‑53, GDPR, and internal policies using ServiceNow GRC, Confluence, and Jira. • Lead enterprise‑wide risk, privacy, and vendor assessments using OneTrust, ServiceNow, Nessus, Qualys, identifying gaps and driving remediation that strengthens overall security posture. • Design and maintain security frameworks for cloud and on‑prem environments, improving governance consistency and audit readiness. • Oversee IAM/PAM governance using Azure AD / Entra ID, Okta, BeyondTrust, enforcing least‑privilege access, improving privileged visibility, and reducing access‑related risks. • Manage third‑party risk assessments, evaluating vendor controls and ensuring regulatory and contractual compliance using OneTrust Vendor Risk and GRC workflows. • Support internal and external audit cycles, preparing evidence, validating controls, coordinating remediation, and improving audit outcomes through structured documentation and continuous monitoring. • Develop and update security policies, standards, and procedures, ensuring adoption through training and governance oversight. • Collaborate with IT, security, legal, and compliance teams to embed security‑by‑design into projects, digital transformation initiatives, and operational processes. • Monitor emerging threats, regulatory changes, and industry trends, providing leadership with actionable insights for risk‑based decision‑making. • Leveraged MITRE ATT&CK insights to evaluate gaps in authentication, authorization, and privilege escalation controls. Key Achievements: • Strengthened governance and compliance posture. • Improved audit outcomes and control effectiveness. • Reduced access‑related risks through stronger IAM/PAM. • Enhanced data protection and privacy alignment. • Increased security awareness across the organization.

Key Achievements: • Achieved a Satisfactory rating in the Global OT Cybersecurity Audit through strong NIST 800‑82 and IEC 62443 implementation. • Reduced unauthorized OT access by 50% and achieved 100% RBAC enforcement via BeyondTrust PAM. • Strengthened ICS security posture by leading OTDC 3.0 deployment and Purdue‑aligned segmentation. • Elevated OT cybersecurity maturity from Initial to Quantitatively Managed across Sub‑Saharan Africa. • Improved regional data protection and reduced data loss incidents through DLP governance. Core Responsibilities: • Provided regional OT/ICS cybersecurity leadership, aligning controls with NIST CSF, ISO 27001, NIST 800‑82/53, IEC 62443, and internal OT policies using ServiceNow GRC, Archer, Confluence, and Jira. • Led OT risk assessments using Nozomi, Tenable.ot, Nessus, Qualys, and patch tools, driving remediation and improving asset visibility. • Directed OT network segmentation and secure architecture design using the Purdue Model, Cisco/Firepower firewalls, industrial DMZs, segmentation gateways, and Zero Trust principles. • Oversaw IAM/PAM governance using BeyondTrust and Azure AD / Entra ID, enforcing least‑privilege access and improving privileged visibility. • Supported global and regional OT cybersecurity audits, preparing evidence, validating controls, and coordinating remediation. • Managed OT vendor and third‑party risk assessments, ensuring compliance with IEC 62443‑2‑4, NIST 800‑53, and onboarding requirements. • Developed OT security standards, procedures, and secure‑by‑design guidelines for engineering, operations, and IT/OT teams. • Delivered OT/ICS cybersecurity awareness training using LMS platforms, PLC/HMI simulators, and industrial network tools. • Implemented and governed regional DLP controls, supporting RPO/RTO goals and reducing data loss incidents. • Participated in architecture boards and governance forums, ensuring OT/IT alignment using TOGAF‑aligned processes.

Key Achievements: • Improved enterprise security posture by strengthening access governance, endpoint protection, and network controls across multiple regional offices. • Reduced downtime and service disruptions through proactive monitoring, patching, and infrastructure optimization. • Enhanced audit readiness and compliance alignment through structured documentation and evidence management. • Increased user security awareness through targeted training and continuous support. Core Responsibilities: • Delivered IT security and infrastructure support across regional offices, ensuring availability, confidentiality, and integrity of systems, networks, and business‑critical applications. • Managed identity and access lifecycle processes using Active Directory, enforcing least‑privilege access, password policies, and secure onboarding/offboarding. • Supported endpoint security using antivirus/EDR platforms, patch management tools, and configuration hardening to reduce vulnerabilities and improve device compliance. • Monitored network performance and security using switches, firewalls, VPNs, and monitoring tools, ensuring stable connectivity for corporate and travel‑management systems. • Performed routine system maintenance, updates, and troubleshooting across servers, workstations, and network devices, improving operational efficiency and reducing incidents. • Supported internal and external audits by preparing evidence, validating controls, and ensuring compliance with internal policies and industry best practices. • Managed vendor coordination for hardware, software, and service escalations, ensuring timely resolution of issues and adherence to SLAs. • Provided user support and training on security best practices, system usage, and safe handling of corporate data, improving overall security awareness. • Documented procedures, configurations, and incident resolutions to strengthen knowledge management and support continuity.

Key Achievements: • Strengthened third‑party security posture through improved due‑diligence and control validation processes. • Contributed to a 30% reduction in organizational risk exposure through governance and policy alignment. • Reduced unauthorized access incidents by 45% through identity governance improvements. • Lowered phishing‑related incidents by 40% through targeted awareness and simulation programs. • Supported secure deployment of enterprise‑grade physical security and automation systems across multiple sites. Core Responsibilities: • Performed third‑party and vendor risk assessments using OneTrust, ServiceNow GRC, and due‑diligence workflows, evaluating supplier controls against NIST, ISO 27001, and internal governance requirements. • Supported the development, review, and enforcement of security policies, standards, and procedures to strengthen compliance and reduce operational risk. • Executed identity governance activities, including RBAC validation, MFA configuration, and access hygiene improvements using Azure AD / Entra ID and Okta. • Monitored security events and anomalies using Splunk, IDS/IPS, and firewall logs, contributing to incident investigations and documentation. • Provided technical support for physical security systems, including installation and configuration of access control, Mobotix and American Dynamics CCTV solutions, and high‑end security hardware. • Installed and supported ELAN home automation systems, integrating audio‑visual, security, and environmental controls for residential and commercial clients. • Assisted internal teams with control assessments, remediation tracking, and evidence preparation for audits and compliance reviews. • Maintained governance documentation, risk records, and incident reports to support transparency and audit readiness.

• Conducted in-depth data analysis on the World Bank's STEP-B project, ensuring data accuracy, integrity, and compliance with project implementation standards. • Developed and managed digital archiving systems, organizing and preserving critical datasets and multimedia content to improve information accessibility and retrieval. • Designed and implemented data management strategies, ensuring structured storage, analysis, and reporting of research findings for project evaluation and decision-making. • Created and optimized multimedia content, integrating graphics, videos, and digital assets to support project documentation and stakeholder engagement. • Collaborated with research teams and government agencies, providing analytical insights to enhance project outcomes and improve technological innovation management. • Standardized data collection and processing procedures, minimizing errors and ensuring consistency in research methodologies and statistical reporting. • Utilized data visualization tools to generate comprehensive reports and presentations, simplifying complex research findings for effective communication with stakeholders. • Provided technical support in digital content production, ensuring quality assurance and alignment with organizational objectives. • Maintained databases and ensured secure data handling, adhering to best practices in digital information management and confidentiality protocols. • Conducted quality assessments of multimedia assets, improving content relevance and alignment with NACETEM’s research and policy objectives. • Assisted in the development of training materials and knowledge-sharing resources, supporting capacity-building initiatives within the organization. • Contributed to technology-driven research projects, leveraging data analytics and digital tools to enhance innovation strategies in national technology management.