Security Officer Manager

ADEWUMI SALAKO

Information Systems Security Officer

PERSONAL DETAILS

Nationality: American

Email: ******@*****.***

Contact: +1-346-***-****

Website: https://www.credly.com/users/adewumi-salako PROFILE SUMMARY

I am an Information System Security Officer with over 10 years of experience in development and execution of Information System Security measures using NIST Risk Management framework, NIST Cybersecurity Framework and ISO 270001/2 standards to achieve confidentiality, integrity, and availability. I am a resourceful and motivating leader thriving in high-pressure, high-demand work environments, and am dedicated to ensuring business goals are achieved. I’m a clear and effective communicator and enjoy working with colleagues to exceed expectations. I possess a natural ability to connect meaningfully with people across all levels and use these interpersonal talents to increase consensus and build strong relationships with management and team members alike.

PROFESSIONAL EXPERIENCE

Stanbic IBTC Bank 07/2018 – Present

Information Assurance Security Manager

Job Function & Achievements

• Ensured active participation in the annual development and implementation of the organizations risk management strategy so as to ensure alignment with the organizations business strategy.

• Participated in the development and management of secure systems development lifecycle (SDLC) to ensure adequacy of embedded controls throughout the SDLC process.

• Facilitated the translation of regulatory directives into operational processes and system controls.

• Provided insight and guidance during the review, documentation and assessment of existing and new information technology initiatives.

• Coordinated the documentation and escalation of security risk incidents as well the implementation of remedial actions for identified risk exceptions.

• Proactively identified existing and emerging risks trends or threats during risk assessment of IT Systems and Applications, as well as the implementation of controls to mitigate identified risk where appropriate.

• Ensured continuous monitoring of open audit and regulatory exception to ensure adequacy and timeliness in the implementation of agreed actions.

• Performed periodic review of system access configuration and recommend changes where applicable so as to ensure compliance with regulatory guidelines and standards.

• Honored with the Risk Assurance Leadership Icon Award for 2021 In recognition of outstanding leadership qualities.

Stanbic IBTC Bank 10/2014 – 06/2018

IT Audit Manager

Job Function & Achievement

• Performed assurance, advisory audits and post implementation review of new and existing applications, information systems, database centers servers, IT physical infrastructure and BCM & Disaster Recovery sites.

• Carried out Information Systems regulatory and compliance audit to provide assurance on adoption of NIST Risk Management Framework, NIST Cybersecurity Framework, ISO 270001/2 standard, SOX - Sarbanes Oxley Framework and PCI DSS where applicable across the organization.

• Provided assurance on the adequacy of IT Security Controls across the enterprise to the Board Audit Committee (BAC).

• Performed annual risk assessment and prepared the Annual Audit plan to ensure effectiveness and adequacy of Internal Audit assessment.

• Worked with External Auditors and Regulators during External and Regulatory IT Audit Risk Assessment.

• Played a key role in the development of Audit personnel by leading auditing training to build high- performance teams focused on accuracy and excellence in job execution. Stanbic IBTC Bank 05/2012 – 09/2014

IT Risk Management Assurance Team Lead

Job Function & Achievement

• Facilitated annual Risk and Control Self-Assessment (RCSA) across the IT Business Functions.

• Maintained a Risk Register and monitored key risk indicators (KRIs) across the Information System landscape of the organization. Instances of material breach were escalated to IT Management and Governance Committee.

• Participated in Risk Governance Committee meetings and provided update on the Information System Security Risk profile of the organization.

• Facilitated IT Risk awareness training sessions across the organization and published periodic communications on new and emerging risk across the industry.

• Reviewed Information Systems Security Risk policies and ensured compliance with the organization’s Risk Management framework.

• Collaborated with the Risk Assurance Community during External and Regulatory IT Audit Risk Assessment.

• Managed the IT risk assurance team and coordinated the development of our annual risk assurance plan. EDUCATION & QUALIFICATIONS

Institution/Organisation Degree/Diploma/Certificate Federal University of Technology

Bachelor of Technology Degree: Electrical and Computer Engineering (4.19 GPA)

LBA Pan-Atlantic University Course: Competitive Strategy Development Programme ADDITIONAL CERTIFICATES/COURSES/TRAINING

Date Certificate/Course/Training

2022 Certified Information Systems Security Professionals (CISSP) 2021 Certified Information Security Manager (CISM), ISACA 2020

Certified Information System Auditor (CISA), ISACA Certified Governance of Enterprise IT (CGEIT), ISACA 2019 Digital Leadership Transformation Boot Camp, Skillbase, Interswitch 2018 Cybersecurity First Responder Training, New Horizons 2017 Network Security Foundation, QA Ltd., 2017

2016 Enterprise Risk Management, Phillips Consulting

Contact this candidate