Project Management Security Solutions

WILLIAMS O. OJOMU

Cell: +1-832-***-****

******@******.***

STATEMENT OF PURPOSE

Results-driven IT Security Leader with over 20 years of experience in various security domains such as API management, cloud security, identity management, multi-factor authentication, network infrastructure, and endpoint security. As a certified professional

(CRISC, CISSP, CISM), I excel at aligning technology with business goals, promoting innovation, and improving security efficiency.

I have a solid background in researching emerging security solutions, documenting best practices, and implementing robust security architectures. I possess deep knowledge of authentication, authorization, and security policies and am proficient in architectural design tools like Visio. I am passionate about leveraging cloud capabilities for secure infrastructures and effectively communicating the risks and benefits of proposed security solutions through detailed documents and diagrams. TURNAROUND EXPERT – A proven CISO with strengths in service management, program management, and project management, recognized as a dynamic change agent. Excels in turning around, building, and establishing functional areas that drive measurable impact on the bottom line. Demonstrated expertise in creating and leading high- performing teams to deliver comprehensive solutions. Adept at building and optimizing critical functions, including Program Management Office (PMO), Security Architecture, and strategic cybersecurity initiatives, ensuring alignment with organizational goals and industry best practices.

CORE COMPETENCIES –

• Leadership: Strategic Planning Global Team Building Executive Collaboration

• Security Architecture: Cloud Security Architecture Zero Trust Défense-in- Depth Micro-Segmentation

• Identity Management: IAM MFA Directory Services SSO SAML

• Network Security: Routers/Switches Firewalls VPN Tunnels (DMVPN, S2S IPSEC, HTTPS Client VPN)

• Endpoint Security: Tools & Best Practices Device Management (MDM) Mobility Solutions

• Cloud Strategy: Cloud Management Gateway Cloud Security Products

• Operational Technology (OT) Security: IEC62443 Standards for ICS

• Governance & Compliance: NIST ISO 27001 IEC 62443 FFIEC

• Risk Management: Threat Model Vulnerability Management Incident Response

• Project Management: Agile Waterfall PMP Certified

• Tools & Platforms: FireEye Splunk Tenable XM Cyber Palo Alto Networks AREAS OF EXPERTISE

Architectural Principles: Service-

Oriented Architecture (SOA), Data-Centric

Design, Cloud-Native Strategies, Scalability

and Resilience Engineering.

Enterprise Architecture (EA) includes the

TOGAF Framework, Business Capability

Model, EA Governance, IT/OT Integration,

and Digital Transformation Roadmaps.

Technology Leadership: Cross-Enterprise

Systems Integration, Stakeholder

Management, Technology Roadmaps, and

Agile Transformation.

Security Architecture: Zero Trust,

Identity and Access Management (IAM),

Micro-Segmentation, NIST, and ISO 27001

Compliance.

Software Development Lifecycle

(SDLC): Agile, Waterfall, DevOps,

Continuous Delivery Pipelines, End-to-End

Project Execution.

Cloud Solutions: AWS, Azure, Hybrid

Cloud Implementations, Cloud Cost

Optimization.

Compliance & Governance: NERC

CIP, GDPR, SOX, COBIT, PCI, ISO 2400.

Tools & Technologies: Bomgar,

Cloudflare, Zscaler, Miraki, ArchiMate,

Sparx EA, Jira, Confluence, Azure DevOps,

ServiceNow.

Education & Certifications

• Ph.D. 2009 – 2013 - University of Liverpool,

England – Security

• Certified Information Systems Security

Professional (CISSP)

• Certified Information Security Manager (CISM)

• Certified in Risk and Information Systems

Control (CRISC)

• Project Management Professional (PMP)

Security Officer and Chief Security Architect–

Royal VOPAK – Houston, TX July 2022 – Present

• Led strategic discussions with leadership to align IT initiatives with business objectives and drive digital transformation.

• Oversee IT infrastructure upgrades to ensure systems are reliable, scalable, and support organizational growth.

• Conducted product evaluations of emerging cybersecurity tools aligned with enterprise needs.

• Developed and implemented strategies and roadmaps for digital modernization and cloud adoption, aligning with enterprise objectives.

• Collaborated with external vendors to provide structured feedback and feature improvement suggestions.

• Collaborated with executives to define business requirements and deliver hands-on proof of concepts for emerging technologies like AI, IoT, ML, and AR/VR.

• Designed, implemented, and managed PKI solutions, including certificate lifecycle management for enterprise systems.

• Administered digital certificates and encryption protocols across hybrid environments to ensure confidentiality, integrity, and availability.

• Monitored and enforced compliance with internal and industry PKI-related security standards and policies.

• Developed and maintained security architecture documentation, certificate policies, and standard operating procedures.

• Led efforts to troubleshoot and resolve complex PKI and digital certificate issues affecting user access and secure communications.

• Mentor and coach IT teams to foster innovation, problem-solving, and accountability.

• Performed architecture gap assessments to identify critical security weaknesses across IT/OT systems and recommended remediation strategies.

• Collaborated across IT and security functions to ensure secure integration of digital certificate-based authentication in business applications.

Senior Director of Technology and Chief Security Architect Ascena Retail – Remote/Houston, TX • Oct 2020 – Jan 2022

• Directed enterprise technology initiatives to enhance business operations and streamline workflow automation.

• Spearheaded Salesforce solutions to optimize customer relationship management and business intelligence.

• Designed and operationalized cybersecurity governance models to define accountability, oversight, and cross-functional integration post-merger.

• Delivered cybersecurity integration roadmaps aligned with post-acquisition end-state architecture and regulatory compliance.

• Led the development and execution of IT strategies to align technology investments with business needs.

• Directed systems integration initiatives to improve the efficiency and scalability of the IT infrastructure.

• Managed IT teams, fostering a high-performance culture, and enhancing employee engagement.

• Ensured compliance with industry regulations and implemented cybersecurity best practices.

• Drove adoption of emerging technologies (IoT, AI, ML, AR/VR) and multi-cloud strategies (GCP, Azure).

• Developed and executed data-driven strategies to support executive decision-making and operational improvements.

• Managed enterprise IT projects, ensuring timely delivery, cost control, and strategic alignment with business objectives.

• Developed and executed an enterprise-wide architecture strategy that unified IT and OT cybersecurity systems, aligning with NIST, PCI DSS, and ISO 2400 standards.

• Oversaw the adoption of Zscaler for Zero Trust Network Access (ZTNA), streamlining secure web gateway functionalities and reducing the risk of cyber threats in a distributed workforce. Professional Experience

• Designed and executed SDLC frameworks with integrated DevSecOps processes, enabling secure application development and reducing vulnerability exposure early in development cycles.

• Established EA governance principles to harmonize business and IT strategies, driving efficiency and consistency across enterprise-wide initiatives.

Cybersecurity leader with expertise in designing and managing Public Key Infrastructure (PKI) systems in hybrid environments. Skilled in certificate lifecycle management, digital signing, and encryption policy enforcement, with a focus on compliance. Experienced in securing authentication systems and leading cross-functional PKI initiatives. Career Highlights at Wipro

Director of Security Program GRC IT/OT Security AlertEnterprise – Remote – Houston, TX • January 2018 – July 2020

• Established advanced security architecture strategies aligned with NERC-CIP regulations, focusing on integrating IT/OT systems and ensuring compliance across critical infrastructure.

• Directed the convergence of Physical Identity and Access Management (PIAM) systems to achieve NERC-CIP compliance, creating a unified security framework for physical and digital access.

• Led all architectural deliverables for next-generation digital transformation, including hands-on PoCs and technical solution design.

• Designed and implemented a scalable enterprise-wide Public Key Infrastructure (PKI) solution supporting over 50,000 internal users and external partner integrations.

• Automated certificate lifecycle management using Microsoft ADCS and Venafi, reducing expired certificate incidents by 95%.

• Integrated PKI with identity federation (SAML, OAuth2.0), ensuring secure authentication across cloud-native and legacy systems.

• Performed regular PKI audits and compliance reviews to meet internal policies and industry standards (NIST, ISO 27001, PCI DSS).

• Authored comprehensive certificate policies (CP) and certification practice statements (CPS) to govern internal CA operations.

• Collaborated with security operations and infrastructure teams to remediate certificate vulnerabilities, harden cryptographic configurations, and implement CRL/OCSP services.Conducted current state assessments, identified improvement areas, and created actionable future-state roadmaps.

• Created and executed readiness strategies to fulfill NERC-CIP Section 5 requirements for cloud integration, guaranteeing smooth migration and regulatory compliance.

• Rolled out a global cybersecurity framework adopted across multiple regions and industries, delivering consistent protection against emerging threats.

o Key Achievements:

o Played a pivotal role in reducing time-to-detection and response by 40%, leveraging SOC advancements and real-time analytics.

o Designed and deployed a comprehensive security architecture framework, harmonizing IT/OT and physical access controls to enhance global operational security. o Facilitated readiness for cloud integrations compliant with NERC-CIP Section 5, ensuring scalability and resilience in evolving cloud environments.

Head of Operation Officer & CISO

PlanRX – Houston, TX • August 2018 – January 2019

• Spearheaded the digital transformation of IT infrastructure, leveraging AWS cloud solutions to enhance scalability, operational efficiency, and disaster recovery capabilities.

• Defined and implemented comprehensive supply chain procedures, coordinating with staff, manufacturers, and logistics to optimize end-to-end operations.

• Developed and executed an ECC Data Volume Management (DVM) strategy, encompassing Data and Document Archiving, System Maintenance, Custom Archive Objects, and Solution Manager DVM monitoring and configuration.

• Led SAP supply chain implementations, managing the project lifecycle from initial planning and configuration to successful go-live, ensuring alignment with organizational goals.

• Designed and enforced minimum/maximum inventory levels and holding targets for raw materials and finished goods to optimize warehouse efficiency and reduce costs.

• Architected and delivered solutions for legacy modernization, B2B transformation, and SOA implementations.

• Collaborated with business and IT stakeholders to translate requirements into scalable, flexible, and adaptable solutions.

• Participated in executive-level meetings, facilitated mind share, and exchanged strategic ideas.

• Provided technical leadership in the design, development, and integration of enterprise applications. Senior IT Security Program Manager Halliburton M&A Cutover Program Halliburton – Houston, TX • Jan 2014 – Dec 2017

• Led cybersecurity integration for multi-entity M&A cutovers, overseeing current-state cybersecurity risk assessments, gap analyses, and architecture reviews to identify integration risks and compliance exposures.

• Developed and executed end-state security architecture and governance models, ensuring scalable, secure, and regulatory- aligned integration of new acquisitions.

• Served as a cybersecurity lead advisor for post-merger integration (PMI), coordinating across IT, security, and legal teams to ensure secure data migration, access control, and incident response readiness.

• Designed operating models and control frameworks to align security oversight with Halliburton’s enterprise risk management and regulatory standards (NIST SP 800-53, ISO 2400, PCI DSS).

• Authored and refined a repeatable M&A cybersecurity playbook, outlining pre-deal due diligence, integration checkpoints, and long-term resilience strategies to reduce time-to-secure operations.

• Built and maintained a roadmap for cybersecurity integration, supporting future-state readiness, business enablement, and cross-functional security assurance post-acquisition.

• Designed and managed detailed go-live Cutover Plans, coordinating functional work streams, data migration, and SNP processes, including managing the data carve-out and all SAP transport activities.

• Ensured the security and resilience of the HA/TMA networks by aligning technical solutions with compliance requirements and global best practices.

o Key Achievement:

o Delivered a secure, compliant, fully operational production environment post-cutover, minimizing downtime and safeguarding critical enterprise assets. Further WIPRO Technologies Consulting

Global Prior Employment Summary

o Comcast Inc. (NJ, US)

o 2014 – 2014

o Pitney Bowes (CT, US)

o 2015 – 2015

o BP International (TX, US) / London, UK

o 2013 – 2013

o Philips Electronics Manufacturer, Eindhoven-Holland o 2012 – 2012

Prior Employment Summary

• Digital Transformation: Pioneered several organizations’ digital roadmaps, leveraging cloud-native architectures, DevSecOps pipelines, and container orchestration (Docker, Kubernetes) to accelerate product delivery and optimize operational efficiency.

• SAP Supply Chain Implementations: Led global rollouts of SAP (including S/4HANA and ECC) to streamline procurement, production planning (PP), and warehouse management (WM) processes. Integrated real-time analytics for demand forecasting, reducing inventory costs and improving on-time delivery metrics.

Contact this candidate