Adedayo Adeniji | Cyber Security, Privacy & Technology Risk

A decade of experience across internal audit, risk management, and IT governance.

Based in Amsterdam.

Local time--:--

01 / ABOUT

For over a decade, I've worked at the intersection of technology risk, security and privacy.

Over the past decade, my career has moved from IT governance, process improvements and reengineering, to cyber security and privacy advisory, and finally to internal audit. That progression has given me a broad view of how organisations identify risk, design controls and determine whether those controls hold up in practice.

Today, much of my work involves navigating complex business critical systems, asking the right questions and turning technical findings into useful information to support stakdeholde decision-making.

I am particularly interested in how assurance continues to evolve as technology changes, from cloud and data governance to AI risk, automation and the growing role of analytics in audit.

I am currently based in Amsterdam and work for Booking Holdings.

02 / WORK EXPERIENCE

Work experience

2022 to present

Booking.com / Booking Holdings

Senior Cyber Security Auditor

Netherlands

I work within the Global Internal Audit team at Booking Holdings, covering these brands in the group.

Booking.com
Agoda
Kayak
OpenTable
Priceline
BHFS

My work spans cyber security, privacy, technology and integrated business audits, from initial scoping and stakeholder walkthroughs through control testing, issue validation and final reporting.

Over the past four years, I have delivered more than 20 risk-based audits covering areas including data privacy, application and cloud security, business continuity, software development, vulnerability management, payments, regulatory readiness and generative AI.

Alongside audit delivery, I use data analytics to improve testing and have helped introduce AI tools and techniques into the team's audit workflow.

2020 to 2022

KPMG Nigeria

Analyst
Associate
Senior Associate

Cybersecurity and Privacy Advisory

Nigeria

At KPMG, I worked with organisations across financial services, telecommunications, technology, government and other industries on cyber security, privacy and resilience.

I led and supported programmes covering ISO 27001 and ISO 22301 implementation, cyber maturity assessments, data protection audits, IT audits, business continuity and crisis simulation exercises.

I also worked with global KPMG teams on a UK Government-funded cyber security capacity-building programme spanning Nigeria, South Africa, Kenya, Brazil and Indonesia.

2016 to 2019

Inlaks Limited

IT Governance, Risk & Compliance Analyst

Nigeria & Ghana

My career began in governance, risk and compliance, working across technology operations in Nigeria and Ghana.

I led the implementation and management of several ISO management systems (9001, 20000, 27001, and 22301), coordinated internal and external audits, supported enterprise risk management, and led the review and optimisation of 173 business processes.

It was where I learned to look at technology risk not as an isolated security problem, but as part of how an organisation operates.

03 / FRAMES