Summary
Overview
Work History
Education
Skills
Certification
Affiliations
Additional Information
Timeline
Generic

Mariam Ayeni

London/Manchester,ENG

Summary

Professional with 15+ years of experience in ITSM, security, compliance, and IT audit within the Government, Healthcare, and Financial services industries. Skills include: In-depth knowledge of cyber security, auditing and compliance with regulatory requirements. Providing assurance and advisory services to organizations looking to implement, or expand on, their internal controls in an effort to meet requirements set forth by regulatory agencies. Additional skills and areas of expertise include: IT compliance & audit including, IT audit standards and compliance, security audit, physical & logical audit, risk management, regulatory compliance, analytics & data management analysis, information assurance & compliance within the government, financial and healthcare industries. Cyber policy and risk analysis including, information security, protection of national critical infrastructure, IT operations government regulatory assessment and control design, IT compliance and governance, IT leadership, IT security and incident response. ITSM including, change control, ITSM implementation and design, IT incident, problem and change management, trend analysis & reporting, service delivery, service management, IT operations, communications, business process redesign. Domestic & International business including, international business operations, business technology assessment, process improvement, sales analysis, strategic process design, business integrations, international policy, project management, strategic planning & oversight. Expert at implementation of internal controls, assurance and advisory services, consulting, and best practice related to IT. IT assessment of risk, impact, and management, maturity assessments, risk assessment, control assessment, internal audit, compliance management, IT operational security evaluations utilizing industry guidelines, standards and/or best practice frameworks.

Creative Senior Program Manager with exceptional background in [Type] industry. Proven success building and motivating program teams to meet project goals. Demonstrated leadership in systems implementation, program execution and process improvement engagements.

Overview

18
18
years of professional experience
1
1
Certification

Work History

Governance, Risk, and Compliance Consultant

Infosys Ltd
09.2016 - Current
  • Perform IT SOX control assessments for section 302 and 404 Reporting
  • Provide IT Compliance oversight
  • Provide advisory services to internal IT and business units, as well as, Internal and external audit.
  • Perform ITGC audit in accordance with IPPF standards, including GTAG, COBIT, ISACA, ITAF, IIA, and ITIL frameworks.
  • Manage engagement activities between compliance, internal audit and external audit teams.
  • Supported management through risk identification, control testing and process improvement procedures.
  • Supervised and coordinated projects for external auditors and examiner evaluations.
  • Reported internal control issues to management and supplied comprehensive recommendations to mitigate the associated risks.
  • Communicated audit results to upper management through written reports and oral presentations.
  • Gathered data for internal audits through interviews, financial research and downloads.
  • Articulated audit findings, risks and detailed recommendations to upper management.
  • Met with clients to identify and assess business controls, risks, process gaps and work flow inefficiencies.

Senior Program Manager

Amazon
01.2022 - 11.2023

In this role, I was responsible for Governance, Executive sponsorship, Compliance, Change Management for all Clinical, Informatics, IT, Business, and Organizational changes, process owner for incident (including investigations and response), problem management, and change management (ITSM). Responsibilities include leadership, facilitation of Change Advisory Board and Technical Peer Review meetings, Implementation of ITSM metrics and reporting for Change, Incident, Problem, Manage multiple workgroups and committees/teams, Implement communication standards, Provide leadership and oversight of all ITSM related functions, implementation of ITSM strategy, planning, execution, and delivery of ITSM solutions, Organically build and grow the ITSM environment for major hospital system with 6 hospitals and numerous outpatient and surgery centers, post-acute care providers, long-term acute care providers, specialty hospital and dedicated trauma center.

  • Mentored and supported [Number] [Type] department employees to create strong workplace culture.
  • Conducted audit inspections and independent checks to verify parts and materials.
  • Improved project efficiency by streamlining communication channels and optimizing resource allocation.
  • Led process improvement initiatives by conducting thorough analyses of existing workflows, identifying bottlenecks and redundancies that hindered progress toward established targets.
  • Reduced program costs through diligent budget management and identifying areas for cost savings.
  • Leveraged industry best practices to optimize program management processes throughout the company.
  • Performed program research and analyzed data collection to develop cost estimates and budgets.
  • Mentored and led new employees to enhance [Type] program production.
  • Collaborated with [Type] staff to define legal and operational parameters.
  • Responsible for the planning and design of CRM solutions using EasyVista
  • Monitor various activities related to service delivery and ticket resolution
  • Responsible for the implementation of risk analysis and risk management program for ITSM related activities including ITGC and SOX 404 controls
  • Responsible for the planning, implementation, and execution of ITSM related training and education program(s) including the creation and implementation of ITIL best practice.
  • Implemented company policies, technical procedures and standards for preserving the integrity and security of data, reports and access.
  • Identified process inefficiencies through gap analysis.
  • Managed testing cycles, including test plan creation, development of scripts and co-ordination of user acceptance testing.
  • Mapped process activities to desired outcomes to rectify operational inefficiencies.
  • Recommended operational improvements based on tracking and analysis.
  • Conducted interviews with key business users to collect information on business processes and user requirements.
  • Documented business processes and analyzed procedures to see that they would meet changing business needs.
  • Assessed the impact of current business processes on users and stakeholders.
  • Led bi-weekly Scrum planning meetings to develop team strategies and define project goals.
  • Translated technical specifications into detailed product requirements.
  • Analyzed and investigated all incidents alongside functional management and security supervisors.
  • Monitored Infection Control and Critical Incidents, Risk Management and Quality Improvement plans.
  • Confidently managed the overall operation of nursing services and patient care, including financial management, quality assurance, patient care, safety risk management, teammate satisfaction, quality index scores and facility maintenance.
  • Defined clear targets and objectives and communicated them to other team members.
  • Monitored timelines and flagged potential issues to be addressed.
  • Implemented a set of comprehensive tracking processes to monitor ITSM performance.
  • Assessed vendor products and maintained positive vendor relations.

Sr. IT Audit Professional

Karyopharm Therapeutics
03.2015 - 05.2016
  • Audit information systems in accordance with regulatory requirements, including, but not limited to, PCI-DSS, HITECH, HIPAA, SOX, and FCPA.
  • Provide oversight for all IT audit engagements.
  • Conduct internal audits related to ITGC's and application controls.
  • Conduct fraud investigations for international and domestic operations. 
  • Manage all IT related engagements.
  • Review critical functions related to the integration of acquired systems to ensure proper project management is taking place.
  • Implemented a risk-based audit program.
  • Supervised and coordinated projects for external auditors and examiner evaluations.
  • Communicated audit results to upper management through written reports and oral presentations.
  • Gathered data for internal audits through interviews, financial research and downloads.
  • Articulated audit findings, risks and detailed recommendations to upper management.
  • Reduced external audit fees by 25% each year through careful management of resources.

Sr. IT Audit Manager

Pilgrim's Pride
01.2015 - 03.2015

    In this role, I was responsible for SAP information systems audit engagements with KPMG, McGladrey and other 3rd party vendors.

  • Performed internal audits related to SOX, ITGC's and application controls.
  • Implemented mapping of COSO/COBIT frameworks to internal control environments ensuring that controls were in place for information systems, both new and legacy.
  • Reviewed critical functions related to the integration of SAP modules to ensure proper project management.
  • Articulated audit findings, risks and detailed recommendations to upper management.
  • Gathered data for internal audits through interviews, technical research and downloads.
  • Communicated audit results to upper management through written reports and oral presentations.
  • Supervised and coordinated projects for external auditors and examiner evaluations.

Voice Networks Manager

Nelnet
08.2014 - 12.2014
  • Performed PCI Compliance, SOX Testing (404, SAS70) and NIST Compliance Audit engagements.
  • Established goals, policies, and performance indicators.
  • As Voice Networks manager I analyzed new and repetitive events, incidents, and problems within the technology environment to find common underlying root cause(s).
  • Conducted statistical analysis via trend analysis and various reporting methods to demonstrate where incidents were occurring.
  • Performed and led activities related to problem identification, investigation, and solution implementation.
  • Responsible for extensive IT Service Management (ITSM) and project management activities.
  • Responsible for planning & coordinating telephony related changes.
  • Managed 4 contract (I3) engineers and 8 full time voice network engineers.
  • Also responsible for PCI-DSS compliance.
  • Supervised and coordinated projects for external auditors and examiner evaluations.
  • Articulated audit findings, risks and detailed recommendations to upper management.
  • Communicated audit results to upper management through written reports and oral presentations.

Incident, Problem & Change Manager

Nelnet
04.2012 - 12.2014
  • Conducted Compliance, SOX Testing (404, SAS70) and NIST Compliance Audit engagements for the entire organization.
  • Established goals, policies, and performance indicators.
  • Analyzed new and repetitive events, incidents, and problems within the technology environment to find common underlying root cause(s).
  • Conducted statistical analysis via trend analysis and various reporting methods to demonstrate where incidents were occurring.
  • Performed and led activities related to problem identification, investigation, and solution implementation.
  • Responsible for extensive IT Service Management (ITSM) and project management activities.

IT Infrastructure Engineer- SWAT

Nelnet
04.2012 - 11.2012
  • Analyzed new and repetitive events, incidents, and problems within the technology environment to find common underlying root cause(s).
  • Conducted statistical analysis via trend analysis and various reporting methods to demonstrate where incidents were occurring.
  • Performed and led activities related to problem identification, investigation, and solution implementation.
  • Responsible for extensive IT Service Management ITSM) and project management activities.

Project Manager Consultant

SolutionCraft
03.2009 - 07.2012

    As a consultant my responsibilities included Implementing projects related to, CRM, ERP, IT security and information systems.

  • Analyzed problems and prepared remediation plans related to vulnerabilities.
  • Managed changes to applications including bug fixes, patches, release and Service Pack updates.
  • Managed communications to internal/external stakeholders.
  • Completed contracts for large-scale organizations such as ADT Security, Level 3 Communications, and HealthOne.
  • Worked with finance/accounting, manufacturing, sales and service, and CRM.
  • Implemented a set of comprehensive tracking processes to monitor IT project performance.
  • Developed executive presentations and reports to facilitate project evaluation and process improvement.
  • Directed all phases of IT projects, from Conception to Retirement.

Contract Project Manager

Level 3 Communications
11.2011 - 04.2012
  • Level 3 is the operator of one of the world's largest fiber-optic communications networks.
  • As a contract consultant, I coordinated and managed all projects related to sales engineering and integration.
  • Managed project plans and executed quality/risk management plans.
  • Prepared project plans using Microsoft Project.
  • Reported statistics on trends, revenue, sales, performance and issues/risk.
  • Facilitated general project review and post-mortem follow up.
  • Implemented a set of comprehensive tracking processes to monitor Salesforce.com performance.
  • Developed executive presentations and reports to facilitate project evaluation and process improvement.
  • Directed all phases of Salesforce.com projects for the sales enablement team.

Operations Security Coordinator/ IT Auditor

GHX
03.2006 - 02.2009

    Global Healthcare Exchange (GHX) provides an electronic trading exchange designed for health care providers, suppliers, and manufacturers to buy and sell supplies online. My role as Project Coordinator / Operations Security Auditor required extensive project coordination and project management for audit and security engagements within IT.

  • Managed risks for IT projects.
  • Performed SOX testing of IT general controls
  • Provided oversight for PCI and exchange security implementations.
  • Conducted analysis of requirements for the development team to ensure that projects would have a high success ranking prior to initiation and planning.
  • Audited user accounts, including contingent workers, to achieve corporate objectives related to access control.
  • Supervised and coordinated projects for external auditors and examiner evaluations.
  • Communicated audit results to upper management through written reports and oral presentations.
  • Gathered data for internal audits through interviews, financial research and downloads.
  • Articulated audit findings, risks and detailed recommendations to upper management.

Education

MBA - Cybersecurity

Southeastern Oklahoma State University

Skills

  • Audit reporting
  • Fraud detection and prevention
  • Certified Internal Auditor (CIA) In progress
  • Certified Information Systems Auditor (CISA) In Progress
  • Internal and external auditing
  • Certified by Association of Certified Examiners (CFE) In progress
  • Accomplished in project management
  • Performance audits
  • Exceptional communicator
  • Member of IIA, ISACA, and various other associations

Certification

ITIL Foundations Certification (V3) AXELOS Global Best Practice License GR750153753SE Certified Security Sentinel Mile2 License 449300 December 2015 to December 2025

Affiliations

Institute of Internal Auditors December 2014 to Present ISACA March 2015 to Present Association of Certified Fraud Examiners Associate (Pre-Certification) February 2016 to Present

Additional Information

  • Teaching, learning new skills, mentoring, volunteering, outdoor activities, running, hiking, swimming, dog training and travel.

Timeline

Senior Program Manager

Amazon
01.2022 - 11.2023

Governance, Risk, and Compliance Consultant

Infosys Ltd
09.2016 - Current

Sr. IT Audit Professional

Karyopharm Therapeutics
03.2015 - 05.2016

Sr. IT Audit Manager

Pilgrim's Pride
01.2015 - 03.2015

Voice Networks Manager

Nelnet
08.2014 - 12.2014

Incident, Problem & Change Manager

Nelnet
04.2012 - 12.2014

IT Infrastructure Engineer- SWAT

Nelnet
04.2012 - 11.2012

Contract Project Manager

Level 3 Communications
11.2011 - 04.2012

Project Manager Consultant

SolutionCraft
03.2009 - 07.2012

Operations Security Coordinator/ IT Auditor

GHX
03.2006 - 02.2009

MBA - Cybersecurity

Southeastern Oklahoma State University
Mariam Ayeni