
olamilekan Ogunleye
Information Security Analyst | GRC & Compliance
Salary / Daily rate
Cluj-Napoca, Romania
Freelance, open to permanent contract
Skills
Languages
About me
Intro
Experienced Information Security Analyst (GRC) with a proven track record in risk management, regulatory compliance, and policy development. Proficient in frameworks and standards such as PCI DSS, SOC2, ISO 27001/27002/22301, NIST, and GDPR. Skilled in conducting vulnerability assessments, penetration testing, risk assessments, audits, and implementing security controls. Strong communicator, capable of aligning governance with business objectives and enhancing a culture of compliance.
Work experience
Information Security Analyst (GRC)
CYBARIK
May 2022 - Present
4 years 6 months
Remote
● Proactively identified and mitigated security threats, reducing phishing incidents by 85 percent through employee training and DMARC implementation. ● Conducted vulnerability assessments using Nessus and Burp Suite, mitigating 15 high-risk vulnerabilities across web applications and cloud platforms (Azure, AWS). ● Developed and executed incident response plans, collaborating with IT teams to contain and remediate security events, aligning with NIST and ISO 27001 standards. ● Leveraged threat intelligence platforms (OpenCTI, MISP) to analyze threat actor profiles and TTPs, enhancing proactive threat hunting and incident preparation. ● Authored security policies and standards, improving cybersecurity posture by 20 percent and ensuring compliance with ISO 27001, SOC 2, GDPR, and NIST. ● Conducted third-party vendor risk assessments, reducing breach incidents by 40 percent through policy development and supplier compliance reviews. ● Automated cloud security scans using Nessus, reducing manual workload by 80 percent and improving vulnerability remediation timelines. ● Conducted technical risk assessments of web applications and SaaS platforms to identify vulnerabilities based on OWASP Top 10. ● Delivered cybersecurity awareness training, improving phishing detection by 20 percent and fostering a security-first culture via remote collaboration tools (Teams, Zoom). ● Provided actionable risk reports and dashboards to senior management, enhancing decision - making and security posture visibility. ● Used Wireshark and other tools to inspect and interpret network traffic during incident investigations.
Auditor
Eti-osa local government
Jan 2021 - Dec 2021
1 year
Lagos, Lagos State, Nigeria · On-site
Skills: Presentations · Analytical Skills · Interpersonal Skills · Auditing · Organization Skills · Business English · Quality Reviews · Administrative Management · Compliance Management · Microsoft Excel
Account Manager
Dee-jay Bet9ja Sports Shop
Jan 2017 - Oct 2019
2 years 10 months
Skills: Management · Interpersonal Skills · Small Business Financial Management
Education
Babes-Bolyai University
Master of Business Administration - MBA
2024 - 2026
2 years 2 months
Tai-solarin university of education
Bachelor's degree
2018 - 2022
3 years 9 months