ATINUKE VICTORIA OWETE

Built and matured the Cybersecurity GRC and Technology Risk Management function from inception, establishing governance architecture and board-level reporting across a cloud-native, multi-jurisdiction payment platform.

Achieved ISO 27001 certification within six months with zero audit findings, serving as ISMS Manager and reducing control duplication by 60% through a unified GRC architecture across six global frameworks.

Spearheaded the implementation of an ISO/IEC 42001-aligned AI Security Management System (AI-SMS) within six months, positioning the organization as a sector-first mover in AI governance.

Led the enterprise-wide implementation of an AI-enabled IT Risk Management (ITRM) and Third-Party Risk Management (TPRM) platform (Diligent), transitioning from static to continuous risk monitoring.

Deployed a GRC monitoring platform within six months, reducing manual compliance effort by 60% and increasing compliance ratings from 20% to over 80%.

Designed and launched an enterprise-wide AI Governance Program, including a 55-control AI Security Control Map and a 12-month AI Security and Governance Curriculum for the security team.

Established and led the Third-Party Security and Technology Risk Management function, implementing automation tooling for continuous vendor risk assessment and improving executive visibility into supplier risk.

Developed and deployed a risk-informed IAM framework, improving identity lifecycle efficiency by over 75% and enhancing third-party access oversight across cloud and SaaS platforms.

Led ISO 27001, PCI DSS, and CBN regulatory compliance programmes across 13 subsidiaries, embedding a unified governance model that achieved and sustained 100% external audit success.

Operationalised a third-party risk management programme aligned with SWIFT CSP and SOC 2 standards, conducting strategic vendor security reviews that reshaped procurement risk thresholds and improved onboarding timelines.

Developed and presented business cases for GRC automation to executive leadership, delivering a 30% increase in operational governance efficiency and a measurable reduction in manual compliance overhead.

Served as the principal information security liaison to the CBN, ISO/PCI auditors, and regulatory bodies across multiple jurisdictions, leading end-to-end compliance engagements for 13 subsidiaries and the head office.

Delivered client-facing GRC advisory engagements for Tier 1 financial institutions and multinational clients across EMEA, covering IT risk management, ITGC audits, SOC 2 readiness, and regulatory gap assessments.

Conducted control effectiveness evaluations and designed risk remediation plans across NIST CSF, ISAE 3402, GDPR, and SOX environments, strengthening board-level risk visibility for client organisations.

Led third-party cyber risk assessments, privacy audits, and enterprise-wide IT risk reviews aligned with evolving regulatory requirements across financial services and telecommunications sectors.

Contributed to enterprise risk transformation roadmaps, aligning client risk appetite frameworks to regulatory standards and translating audit findings into actionable governance improvements.