Custodian Investment Plc
|Information Security Analyst
Lagos, Lagos State, Nigeria
Summary
Analyzed and monitored cybersecurity risks and compliance, implementing governance frameworks and data protection controls to enhance organizational resilience and regulatory adherence.
Highlights
Developed and enforced robust IT security policies, standards, and frameworks, aligning enterprise operations with NDPR, NIST CSF 2.0, CIS Controls v8, OWASP SAMM, and COBIT to strengthen the overall security posture.
Conducted comprehensive enterprise-wide risk assessments and meticulously maintained the Technology Risk Register, successfully reducing critical risk exposures by 25%.
Executed third-party/vendor risk assessments (TPRAQ, ISO 27001) to ensure compliance with security and data privacy standards, and supported internal/external audits, contributing to zero major audit findings.
Drove stringent compliance with NAICOM and NDPC regulations, enhancing organizational resilience and successfully preventing penalties by ensuring adherence to critical regulatory requirements.
Led impactful security and data privacy awareness initiatives, significantly improving employee compliance awareness by 30% across the organization.
Embedded security best practices into the SDLC through cross-functional collaboration and compliance-focused reviews, while assisting in monitoring data protection programs to ensure adherence to NDPR and international standards.