Olisaemeka

Compliance & Risk Auditor|Consultant| 247 VoIP, Trenton, New Jersey Jun 2025 – Present
Advised clients across finance and technology sectors on end-to-end GRC program design, aligning compliance posture with NIST CSF, RMF, ISO 27001, and GDPR requirements across 15+ active engagements.
Conducted enterprise-wide risk assessments using ISO 31000 methodology, delivering remediation roadmaps that reduced average client control deficiencies by 30% within the first quarter.
Directed internal audits of security controls across infrastructure, applications, and data, delivering risk-ranked findings to guide quarterly remediation.
Architected compliance policy frameworks and control libraries tailored to client regulatory environments, cutting policy gaps identified in external audits by 45%.
Evaluated third-party vendor risk across 50+ portfolios using NIST SP 800-161 supply chain guidelines, surfacing critical contractual and operational exposures for client leadership.
Translated complex regulatory findings into board-ready risk dashboards and executive briefings, enabling faster prioritization of high-impact compliance initiatives.
Coordinated ISO 27001 and SOC 2 audit readiness activities covering evidence mapping, control testing, and auditor liaison, achieving clean audit outcomes for three clients within six months.
Led SOX ITGC audits across financial systems, achieving 100% compliance and eliminating material weaknesses.

Assessed cloud infrastructure against NIST 800-53 Rev. 5 controls, resolving 95% of identified gaps within 60 days and measurably improving AWS security posture.
Led access control reviews across Active Directory for 10,000+ users, enforcing least-privilege principles under ITGC standards and eliminating excessive entitlements across critical systems.
Managed annual ISO 27001 surveillance audits end-to-end, remediating 22 nonconformities pre-assessment and sustaining certification across three consecutive audit cycles.
Audited PCI-DSS network segmentation controls, verifying cardholder data environment isolation and validating compliance ahead of annual QSA assessments.
Strengthened business continuity posture by overseeing 12 structured DR failover tests, reducing RTO from 24 to 6 hours in alignment with NIST SP 800-34 guidelines

Mapped regulatory obligations across FCC, CPNI, and GDPR frameworks for voice and data services, building a unified compliance register that cut audit response times by 35%.
Performed quarterly risk assessments across network and operational systems, identifying 12+ critical vulnerabilities and delivering structured risk scoring reports to senior leadership.
Developed and maintained internal compliance policies covering data retention, call recording, and privacy disclosures, reducing policy gaps flagged in regulatory reviews by 40%.
Monitored third-party vendor SLAs and contractual compliance across 25+ agreements, flagging deviations early and eliminating two high-risk supplier exposures within the first engagement year.
Consolidated control evidence and remediation tracking across 2 successive external audit cycles, achieving zero repeat findings and a 20% reduction in outstanding control deficiencies.

Executed SOX 404 compliance testing across financial reporting systems, achieving 100% audit pass rates and zero material weaknesses across two consecutive fiscal year cycles.
Drove GDPR privacy impact assessments for 20 product and process initiatives, enforcing lawful data handling standards and eliminating regulatory penalty exposure across EU operations.
Analyzed PCI-DSS control gaps across payment processing environments, coordinating remediation efforts that achieved full compliance three weeks ahead of external audit deadlines.
Compiled and presented risk evidence and control documentation across three consecutive regulatory examination cycles, contributing to zero major audit findings.
Prepared monthly risk reports featuring COSO-aligned heat maps and trend analysis, providing leadership with visibility that accelerated remediation timelines by 25%.
Overhauled a 500+ document policy management repository, enforcing version control protocols and ensuring continuous audit readiness in line with ISO 27001 documentation standards.