Adedotun Adeniyi

Functional focus: Cybersecurity Governance, IT Risk & Controls Assurance
• Led end-to-end IT general controls (ITGC) testing across cloud and on-premises environments, assessing control
design and operating effectiveness against SOX, COSO and internal security standards.
• Extended assurance coverage into Identity and Access Management (IAM) governance (SailPoint), reviewing
access provisioning, privileged access, and segregation-of-duties controls across critical systems.
• Conducted Cloud Vendor Management and Cloud Architecture/Design Governance audits, assessing third-party
security posture, data protection controls, and cloud configuration risk.
• Facilitated technical walkthroughs with IT and security stakeholders to evaluate control environments and
challenge practices where security or compliance risk was not fully mitigated.
• Identified control design gaps within change management processes and introduced enhanced testing
approaches, strengthening the security control baseline.
• Built standardised testing templates and centralised documentation approaches, improving audit and governance
reporting efficiency.

• Executed IT and business process controls testing across the full assurance lifecycle, from risk assessment and
scope definition through to findings and remediation reporting.
• Reviewed internal security policies, procedures and applicable regulations to assess compliance and evaluate the
adequacy of underlying controls.
• Performed root cause analysis on control failures and reported findings to support governance and remediation
planning.

Managed integrated audit, risk and controls testing across business operations and financial processes at a regulated
capital markets firm.
• Managed integrated controls testing across business operations, general controls and application controls,
ensuring compliance with internal policy and external regulation.
• Conducted root cause analysis on control failures, evaluating compensating and mitigating controls and
presenting governance recommendations to senior management.
• Evaluated internal controls through risk based assessment, incorporating prior audit cycle findings to inform
current testing scope and approach.
• Performed vulnerability assessments to ensure risks were assessed, evaluated and mitigated in line with
governance and security requirements.

Application Security & Vulnerability Risk
• Performed vulnerability assessments across information systems, ensuring risks were identified, evaluated and
mitigated in line with security governance requirements.
• Conducted root cause analysis on control failures, evaluating compensating and mitigating controls and
presenting security and governance recommendations to senior management.
• Coordinated and supervised the re-implementation of the Database Monitoring Tool and Web Application Firewall.
• Developed and executed the annual information security program risk assessment and reported findings to
management.
• Reviewed vulnerabilities on systems servers, and applications and ensure findings are sufficiently addressed.

Information Security Governance, ITGC & Vulnerability Management