Duronke Owoleso, Mba, Cissp, Cisa, Cdpse, Pmp, Itil Email & Phone Number

Greater Toronto Area, Canada

The Security Bench (TSB) serves as a central hub for insights, technologies, and strategies in Information Security. This platform offers a wealth of content covering various aspects of Information Security, including but not limited to Application Security, Artificial Intelligence (AI), Customer and Enterprise Identity and Access Management (IAM), Cloud Security, Incident Response, Governance and Risk Compliance, Business Continuity, Disaster Recovery, and much more. TSB is a trusted resource for staying updated on industry insights, news, trends, articles, interviews, webinars, and podcasts related to Information Security.As the Chief Research Officer, I leverage my extensive industry experience to write about the latest events by publishing blogs, articles, and webinars. I collaborate with clients as part of a team to define requirements, develop and assist organizations in identifying vulnerabilities in their cybersecurity architecture, meet compliance requirements, and produce the necessary documentation. Furthermore, I engage in research activities to enhance the automation, accuracy, and efficiency of detection techniques and associated systems to help organizations bolster their security. My specialization involves creating, developing, integrating, and deploying cutting-edge tools, methodologies, and systems that support cyber operations and other intelligence-related endeavors.

The Government of Canada (GC) - IT Security is responsible for providing the security risk management procedures and policies to ensure adequate protection of data that is stored/processed on the cloud. In this team, I utilized my subject matter expertise in IT security to assess security controls and perform risk assessments for applications, including those being migrated to the cloud. This involved collaborating with application / DevOps teams to review any architecture and solution design documentation, to identify, quantify and mitigate potential risks. Additionally, I worked with multiple stakeholders across the business relating to security categorization (e.g. confidentiality, integrity, and availability) to ensure the appropriate selection of security controls that are aligned with GC policiesI led the review and validation of security architecture principles in multiple security domains including, cloud security, application security, data protection, network security, Identity and Access Management (IAM), and governance.

Walmart is the largest retail chain in the world, as a Senior Risk Analyst, I was responsible for managing and mitigating Walmarts information security vulnerabilities. This included performing continuous monitoring, prioritization, and reporting of vulnerabilities throughout on-premise and cloud-based environments across the Walmart operating model. I was also responsible for ensuring Walmart met regulatory compliance procedures, for example, preparing for the annual NIST CSF Compliance Assessment for Walmart Canada and leading the PCI-DSS Audit for Walmart Canada in 2021

LifeLabs is a leading provider of laboratory testing and management services, contributing to the treatment and prevention of disease by enabling healthcare providers to operate more efficiently and effectively. I was employed as a Senior Security Advisor in their Risk and Governance division, where I supported the delivery of their information security roadmap. This involved conducting cloud service security reviews to ensure alignment with industry best practices and the definement of security controls required for the service to operate in a safe and controlled environmentMy role was multi-faceted, including working with the Project Management Office (PMO), Procurement, and Privacy to perform Supply Chain Security assessments on vendors and partners. I deployed my subject matter expertise in the areas of data privacy to prepare Privacy Impact Assessments, and ensured applications are developed following Information Privacy regulatory and Government compliance requirements that are applicable for the correct Jurisdictions.

Toronto, Ontario, Canada

Scotiabank is a Canadian multinational banking and financial services company headquartered in Toronto, Ontario and is one of Canada's Big Five banks, it is the third-largest Canadian bank by deposits and market capitalization.I was employed as a Senior Information Security Advisor, providing advisory services to CAMS (Customer Authentication Management Services), the bank’s in-grown custom solutions for centralized authentication for all channels. In this role, I conducted TRA on all applications, and APIs being developed and deployed by CAMS using CI/CD and Agile methodologies. I guided the design, development and implementation of sound risk management controls that met the Bank's industry standards that are compliant with local and global regulators. I collaborated with Authentication Engineers to review architectural designs and data flows for internal and external interfaces for safeguards and necessary security controls across various platforms (inc. Mobile, on-prem, in-cloud). Led security due-diligence reviews over third party services providers to determine if implemented, the security and privacy control practices align with the Bank and industry best practices

Canada

Security contractor who conducted and managed IT Security SA&A assessments including, threat risk assessments (TRA), vulnerabilities assessments (VA), privacy impact assessments (PIA), and business impact assessments (BIA) on DRMIS (Custom SAP Defense ERP). Reviewed and made recommendations relating to the IT security posture of the enterprise application systems for priority security control topics, assessing the compliance with applicable (DND) security frameworks (ITSG-33), policies and standards, and preparation for audit readiness

Toronto, Canada Area

Worked with TRMIS - GIAM on the assessment of Access Management Operations (IAM): Process Efficiency &, Automation Worked with LOB Heads and their assigned SMEs to discover and understand business and technical process gaps in various applications Performed risk assessments on identified processes within the confines of compliance and regulatory controls (bank-wise and industry standards)Presented high-level findings in terms of gaps, pain points, and opportunities to Senior management and Stakeholders for feedback and approval for granular details (if required)Deep Dived into approved use cases for automation

Toronto, Canada Area

The Canadian Imperial Bank of Commerce is a Canadian multinational banking and financial services corporation headquartered at CIBC Square in the Financial District of Toronto, Ontario. As an Information Security Consultant, I supported senior management on strategically relevant projects on information technology and security. This included identifying the needs of stakeholders and contributing to governance initiatives in the development of CIBC policies, standards, and procedures whilst also recommending necessary changes to enhance information systems security. I was a key point of contact in the preparation of privacy assurance, threat, and risk assessment activities and examined and interpreted requirements documents, architecture diagrams, and verbal information to determine if a project presents a security risk to CIBC. I analyzed the appropriateness of privileged access of user accounts on various technology platforms; identified access remediation as required by CIBC's Logical Access Control standard and considered best practices, operational risks, and business needs of the groups.

Canada

Assigned to strategically important accounts (e.g. IBM Canada) in the hosted portfolio team, also provided support to senior consultants when required. In this role, I performed annual audits and health checks on managed accounts for supported applications to ensure continuous compliance with regulatory standards. I acted as an SME across core functional areas, including portfolio, program, project security assessments, audits, credential management, access provisioning, authentication and authorization, application security, data security, privacy, and security monitoring in alignment with IBM compliance.Responsible for reviewing the Hardware and Software configuration of major IT Infrastructure (Operating Systems, Databases, network devices) against defined security baselines. This was achieved by working with IBM's global BCRS unit to implement mandatory disaster recovery and other business continuity proof of concept plans as outlined in the service level requirement.

Advanced technical systems analyst who was responsible for documenting and testing the security control framework. Involved in the analysis and review of IT security recommendations whilst implementing appropriate database encryption controls based on the data classification level. Produced exposure and remediation plans and maintained up-to-date security inventory database records and artefacts for the platform, hardware, software version, and security patch-level for in-place RDBMS instances.

Provided thorough documentation and automation of global security checks and compliance with scripts to support clients in identifying IA vulnerabilities and helping with risk mitigation responses. This included producing monthly analytics metrics/dashboarding as well as variance reports/incidents. Participated in security and compliance audits (internal and external) and reviewed the global security settings and IT controls on assigned accountsLiaised often with IBM’s global BCRS unit to implement mandatory disaster recovery and other business continuity plans based on outlined objectives by senior management. I transformed multiple operational processes to ensure the client's operating standards meet business service level agreements.

Toronto, Canada Area

Responsible for performing Security analysis on internal and external solutions and documenting/quantifying risk to ensure the bank IT risk was aligned to internal policy. Heavily involved in the hiring process of necessary personnel to fulfil the objectives of the project, whilst also actively mentoring and managing developers in my team.

Toronto, Canada Area

Primary responsibility for all in-house databases management (Oracle, SQLServer, Sybase) and providing backup/recovery services to maintain a high availability and disaster recovery. In addition to my current services, I participated in and provided leadership in the analysis and application of all technologies embraced by the DB environment including infrastructure, tools & data management processes

Toronto, Canada Area

General administration role responsible for developing, documenting and enforcing database procedures, mainly for knowledge transfer purposes. Performed additional database maintenance and provide additional service by working out-of-hours when required.

Certificate, Cloud & Devops: Continuous Transformation Program

Masters, Business Administration And Management

MBA with specialist subjects in Information Systems Strategy and Governance Graduate Thesis: Evaluation of digital supply chain risk.

Bachelors Of Science, Computer Science And Economics (Combined Honours)