About

One way of working: tracked, prioritized, shipped.

A Security Technical Program Manager across governance, risk & compliance and application security — supporting large-scale initiatives across enterprise and cloud-native environments, making sure the work isn't just defined, but delivered.

Role
Security Technical Program Manager
Company
Amazon Web Services
Based
United States · Remote
Portrait of Gbenga Kaka

Gbenga Kaka

Security TPM · AWS

Profile

My work centers on governance, risk and compliance — security control assessments, risk management, audit readiness and continuous monitoring across cloud, application and enterprise environments. I make sure security work isn't just defined, but tracked, prioritized and delivered.

I translate regulatory and industry frameworks — SOC 2, ISO 27001, NIST 800-53, HIPAA and FedRAMP — into operational controls, and partner with cross-functional teams to assess risk, drive remediation, support audits and strengthen security posture across distributed cloud environments.

Initiatives I've supported

Where the work has made an impact.

Security control assessments and risk evaluations across cloud environments
Audit readiness — standardized evidence collection and control documentation
Framework mapping — SOC 2, ISO 27001, NIST 800-53, HIPAA and FedRAMP
POA&M management and remediation tracking
Third-party and vendor risk management (TPRM)
Application security migration and onboarding for tiered applications
Continuous monitoring, centralized logging and detection
AI/LLM security reviews and guardrails for model-integrated systems
Technical background

Security engineering, end to end.

Application Security

SASTDASTSCA

Governance, Risk & Compliance

SOC 2ISO 27001NIST / HIPAA

Cloud Security

AWSAzureIAM

API & Identity

OAuth2OIDCREST / GraphQL

Cyber Security Engineering

SIEM / DetectionIncident ResponseVuln Mgmt

AI / LLM Security

Threat ModelingGuardrailsPrompt Injection
Let's work together

Secure systems, delivered.