Adedeji Michael Cyber Security, GRC & Sovereign AI Leader
12+ years across security operations, audit and assurance, cloud security, sovereign AI infrastructure and business workflow automation. I take work end-to-end — analyzing business bottlenecks for AI automation, architecting private on-premise AI servers and air-gapped LLMs with zero data egress, running ISO 27001/SOC 2 audit defences, and hardening AWS/M365 estates. MSc in Data Science, CISM and CISA certified. Available for fractional advisory, technical leadership, or hands-on implementation.
Products Built at Pyralink
Security, compliance and privacy products designed, built and architected to solve core enterprise bottlenecks.
Plugs into AWS, Azure, GCP and Microsoft 365 via read-only APIs to continuously map infrastructure against ISO 27001, SOC 2 and Cyber Essentials. Covered by a granted UK Registered Design (No. 6498103) and a pending UK patent application (GB2607921).
Filters routine noise and normalises multi-cloud telemetry to the Open Cybersecurity Schema Framework (OCSF) schema before piping into Microsoft Sentinel or external SIEMs — preventing alert fatigue and data bloating.
Continuous threat monitoring service inspecting underground stealer log dumps, dark web channels, Telegram leaks, and domain registrars for lookalike phishing domains, brand spoofing, and employee credential exposures with automated takedown workflows.
Hardware-enclave tokenisation engine providing real-time PII prompt redaction for Generative AI / LLM workflows — de-risking enterprise databases and private AI pipelines from data breach liability under UK GDPR Article 32.
What I Deliver
End-to-end delivery across security operations, audit defence, cloud architecture, and sovereign AI automation.
Sovereign AI & Private LLMs
Designing dedicated on-premise AI server infrastructure, sizing local GPU hardware, and deploying air-gapped private LLMs. Zero data egress, local private RAG document intelligence, and zero third-party cloud API exposure.
Business AI Automation
Analyzing business operations to uncover manual bottlenecks. Architecting automated AI agent pipelines for contract review, customer operations, and compliance evidence gathering with measurable ROI.
IT & Cyber Audit Defence
CISA-certified end-to-end audit delivery — risk-based planning, fieldwork, workpapers, findings, and tracking remediation through to closure across ISO 27001 (all 93 controls), SOC 2, and Cyber Essentials Plus.
Security Operations & SIEM
SIEM alert monitoring, triage and investigation across Rapid7, Microsoft Sentinel, CrowdStrike, and Defender XDR; vulnerability management and MSSP partner oversight for 24/7 coverage.
Cloud & Microsoft Security
AWS and Microsoft 365 architecture review, CIS hardening, Zero Trust, backup & DR; Microsoft Purview (DLP, eDiscovery, DSAR, labels), and Entra ID (Conditional Access, PIM, RBAC).
AI Governance & Privacy
ISO 42001-aligned AI management, EU AI Act readiness, AI risk assessments, UK GDPR Article 32 data protection operations, and automated compliance pipelines.
Selected Achievements
Every figure below comes directly from delivered enterprise programmes, private AI architectures, and defensible audit outcomes.
Case Studies & Delivery Stories
Client names withheld. Real engineering, architectural and audit transformations.
Zero Trust Cloud Security Re-Architecture
An AWS estate had grown organically across accounts. Misconfigurations kept recurring, cloud spend was escalating without governance, and the estate could not evidence the control posture needed for ISO 27001 or enterprise customer due diligence — putting live deals at risk.
Designed and led a Zero Trust re-architecture against CIS Benchmarks: hardened IAM and network configuration, implemented guardrails and continuous posture monitoring, embedded the controls into the ISO 27001 framework, and aligned identity strategy across cloud and Microsoft 365.
- 50% fewer cloud misconfigurations (Zero Trust + CIS Benchmarks)
- 35% reduction in redundant cloud infrastructure costs
- 92% control compliance achieved during ISO 27001 certification
- Customer due diligence cleared without findings, unblocking key revenue
AI-Driven Continuous GRC & Private LLM Automation
Evidence collection, control testing, and exception tracking were manual and repetitive — consuming analyst capacity and producing inconsistent audit evidence that slowed every certification cycle.
Architected AI-powered GRC automation (CloudAuditX™) and private document-intelligence pipelines that converted point-in-time evidence gathering into continuous monitoring with executive dashboards, and filed intellectual property covering the approach.
- 65% reduction in compliance & audit workload via AI-driven GRC
- Materially better evidence quality for internal and external audit
- Granted UK Registered Design No. 6498103 (granted Jan 2026)
- Pending UK Patent Application (GB2607921)
Major Incident Leadership & Crisis Response
P1/P2 security events demanding coordinated technical containment at the same time as customer, executive and board communication — under time pressure and incomplete information.
Acted as Lead Incident Manager: owned containment strategy, coordinated cross-functional teams, controlled internal and external communications, and ran post-incident reviews that converted attacker TTP findings into concrete control changes.
- Structured containment and executive/customer reporting
- 40% reduction in client MTTR after tabletop IR simulations
- Recurring findings fed straight into the audit and risk plan
Frameworks & Toolset Matrix
What I work with day to day across sovereign AI infrastructure, audit standards, cloud platforms, security operations and privacy.
Dedicated private AI server engineering, local GPU hardware sizing, air-gapped private LLM inference, zero-egress local RAG.
ISO 42001-aligned frameworks mapped to ISO 27001/27701, AI risk classification, and AI system lifecycle assurance.
All 93 Annex A controls: ISMS scoping, risk assessment, Statement of Applicability (SoA), and audit defence.
Trust Services Criteria scoping, evidence gathering, management assertions, and external CPA audit defence.
DPIA methodology, records of processing activities (RoPA), data transfer assessments, and 72-hour breach response.
AI risk classification, conformity assessments, transparency requirements, and DPIA for AI systems.
Cardholder data environment (CDE) scoping, network segmentation, and Cyber Essentials Plus technical verification.
Privacy Information Management Systems (PIMS) extension to ISO 27001 for controller and processor obligations.
Data Loss Prevention (DLP), sensitivity labels, retention policies, eDiscovery, and DSAR management.
Conditional Access policies, Privileged Identity Management (PIM), RBAC access governance, and MFA enforcement.
AWS IAM least-privilege, GuardDuty, Security Hub, KMS encryption, and AWS Backup Vault Lock immutability.
Alert triage and investigation across Rapid7, Microsoft Sentinel, CrowdStrike, and Defender XDR; MSSP SLA oversight.
Professional Experience
12+ years progression across security operations, audit defence, sovereign AI architecture and cloud security.
• Sovereign AI & Automation: Architect private on-premise AI server infrastructure and air-gapped LLMs with zero data egress; evaluate business operations and build automated AI pipelines for contract synthesis and audit evidence.
• Enterprise Programmes: Own client security programmes end-to-end: strategy and roadmap, full policy stack, ISO 27001 certification and surveillance audits, SOC 2 readiness and Cyber Essentials Plus assessments.
• Assurance & Due Diligence: Assess technology projects, SaaS platforms and third-party solutions against security policy and standards; run vendor risk assessments and own customer security questionnaires (SIG, CAIQ, DDQ).
• Cloud & Identity: Secure cloud estates — AWS IAM, network, storage, logging; Microsoft 365 with Purview DLP, Entra ID Conditional Access, PIM and RBAC.
• Security Operations: Run SIEM alert monitoring, triage and investigation across Rapid7, Microsoft Sentinel, CrowdStrike and Defender XDR; Lead Incident Manager for P1/P2 events.
• AI Governance & Board Reporting: Implement ISO 42001-aligned AI governance, advise on EU AI Act readiness, and report monthly to executives and boards.
• Assessed government-grade environments against NIST 800-53 / 800-60, supporting Authority to Operate decisions; produced SSP, SAR and POA&M documentation.
• Directed SOC operations, ran gap assessments against ISO and NIST standards, and led external cybersecurity audits.
• Delivered vulnerability assessments, threat modelling and impact analysis with prioritised remediation for senior leadership.
• Led real-time incident response across cloud and on-premise environments; built the enterprise SOC operations playbook and mentored junior analysts.
• Designed and deployed a CIS/Zero Trust cloud security framework — 50% reduction in misconfigurations.
• Performed third-party and vendor risk assessments; evaluated ITGC, access governance and cloud security architecture.
• Ran vulnerability and patch management across the estate — 25% reduction in vulnerabilities; maintained firewall, encryption and data-protection controls.
• Produced security metrics and breach reporting that drove a 20% uplift in security investment; designed SOC processes and documentation.
• Infrastructure, networking and end-user support with security policy enforcement — 25% reduction in recurring issues through root-cause analysis.
Patents & Innovation
Demonstrated track record of technical invention in automated compliance and privacy-preserving computing architectures.
No. 6498103
“Computer Device for Continuous Patient Monitoring Using Differential Data Protection Techniques” — Granted January 2026 by the UK Intellectual Property Office.
GB2607921
“AI-Driven Compliance and Continuous GRC Automation System” — Continuous control telemetry synthesis for automated audit evidence and real-time verification.
Certifications & Education
Get In Touch
Available immediately for sovereign AI architecture, business workflow automation, audit defence, and interim security leadership. UK-wide, remote or hybrid. Inside or outside IR35 · Rate negotiable.