Information Security Management

Name: BOLAJI BANKOLE James

Physical Address: * Unity Close Behind Reality Isheri-Oke, Ojodu Berger, lagos Nigeria. Contact Number: +234-802-***-****,/+243**********

Email Address : ***********@*****.***

Status: Married Number of Child (If any):0 Date of Birth: April 11th, 1984

Citizenship: Nigeria

PROFILE

Cyber Forensic and Information security professional with extraordinary blend of leadership management and hands on technical experience, A vibrant performance driven Professional with over 8 years’ experience with skills in the implementation of Information Technology solution, Information security solutions, controls with compliance standards with commercial experience interfacing with banks and other financial institutions.

Possess Strong knowledge of Network Security Management skill, ISO 27001, PCI/DSS, Payment Card Industry controls PCI (DSS & PA), OWASP (Open Web Application Security Project), Web Application Security Consortium (WASC), Information Security Management Act (FISMA) & DREAD. Proven expertise in Security Incident & Event Management information security, ISMS, Information security policies, security process and standards for logical and physical security implementations. CAREER OBJECTIVE

A result-oriented professional with extensive experience in Cyber Forensic and Information Security, Projects, Controls, Support and Processes. To professionally and successfully manage Information Technology (IT) Projects, departments, Processes and Staffing. To provide maintenance, Testing, troubleshooting and support for reliability and growth. Demonstrated ability in assessing problem areas and offering recommendations that profitably impact the bottom line. PROFESSIONAL TRAINING SKILL ACQUIRED

Cisco Certified Internetwork Expert in Security (CCIE Security) Certified Information Security Professional (CISSP) Certified Information Security Manager (CISM)

Certified Information System Auditor (CISA) Project Management Professional (PMP)

Hp Trained Professional to Service all HP Printers (MFP, Monochromes & LaserJet) Information Technology Infrastructure Library (ITIL) IBM Africa Security Information Event Management (SIEM) Security Workshop

HP trained on Inventory Management

Computer Engineering and Networking

VSAT Installation Training

Basic GSM Engineering Training Linux

Server Management Window Server

Management

CERTIFICATIONS:

Certified Ethical Hacker (CEH CERTIFIED)

Cisco Cyber Security Specialist (CCSS CERTIFIED)

Cisco Certified Network Administrator (CCNA CERTIFIED) Microsoft Certified System Administrator (MCSA CERTIFIED) Microsoft Certified System Engineer (MCSE CERTIFIED) Microsoft Certified Professional (MCP CERTIFIED)

PROFESSIONAL EXPERIENCE

FINCA INTERNATIONAL, INC August 2016 – TILL DATE

REGIONAL CYBER FORENSIC INFORMATION SECURITY EXPERT –AFRICA Responsible for NIGERIA (UGANDA, DRC, MALAWI, TANZANIA, ZAMBIA)-AFRICA System Monitoring Regulatory Compliance Managing and Implementing endpoint system security tools and applications Network and Firewall Security Management Information systems security vulnerability management Information security policy development and implementation Security Information and Events Monitoring SIEM

Information security projects management

Internal Information systems Security and Compliance Audits Information Security Awareness Training

Developing and maintaining documentation of relevant IT systems and security controls Researching security issues and providing evaluations and recommendations to management Coordinating with network and IT staff to implement and maintain security monitoring controls Assist third parties in compliance, security and audit assessments PROFESSIONAL EXPERIENCE

FINCA INTERNATIONAL, INC August 2015 – July 2016 INFORMATION SECURITY & CYBER FORENSIC EXPERT SYSTEM & NETWORK SECURITY

ENGINEER

Compliance with internal security policies (in addition COBIT и PCI DSS). / Information Security Project Management (analysis, solutions and technologies, planning, administrations). SaaS, Centralized Management security solutions. Distributed system (20 countries and 4 datacentres). Key projects (analysis, implementation):

Information risk and Security concepts, principles and policies, and their application Security systems Information security policy enforcement (eg Access control management, Password Policy) Information security policy Implementation of Infrastructure (Servers (Unix, Linux& Windows), Switches, Routers, Firewall and Applications.

Information security Awareness (Password management, types &modes of attacks) Incident Management.

Network Security Management

Security Solutions and Test (vulnerability assessment, Penetration Testing Firewalls Management system

Security information and event management (SIEM)

Centralized log management Splunk Enterprise (logs from Windows, Linux, Oracle, VMWare, TrendMicro, Cisco, Qualys Guard).

Vulnerability management – Qualys Guard (Windows, Linux, Oracle, VMWare, Cisco, Network devices).

Competence across multiple platforms and technologies: Windows, Unix, Linux, applications, databases; computer operations, Intranet/Internet, etc. Good knowledge of the Bank's critical business applications (E.g Flex cube, Mobile money solutions etc.) DEPLOYED PROJECTS

Installation and Implementation of Security

a data security platform that uncovers database configuration mistakes, Identification and access control issues, Missing patches, or any toxic

Combination of settings that could lead to escalation of privileges attacks, Data leakage,

Denial-of-service (DoS), or unauthorized modification of data held within Data stores (relational databases and Big Data).

Through its multi-user/role-based access,

Distributed architecture, and enterprise-

level analytics,

Deployment of Trend micro antivirus server

Designing and Implementation the network of a new branch for FINCA Micro Finance Branch Deployment of a Proxy Server solution for the Head Office Branch. Implementation of WAN network on a DSL link between Head Office branch and CELLULANT NIGERIA LTD April 2012 – July 2015 LEAD INFORMATION SECURITY & RISK ENGINEER FOR CELLULANT NIGERIA

Led the end-to-end implementation of several large scale government and private projects, including IMPLEMENTED PROJECTS

The design and implementation of security solution for Mobile Money architecture, Cellulant Mobile Payment Platform (Cellulant Wallet)- Co-ordinating the IS team towards the preparation for Mobile Money Operators License to be audited by CBN. Implementing End to End Security Solution for Cellulant Nigeria Mobile Money Solution on all Access channels -Web, Mobile App, IVR, USSD. Cellulant was audited by the CBN and it was a success. Job Role: Lead Information Security & Risk Engineer for Cellulant Nigeria My Responsibilies:

Redesign network diagram of the office Implemented security solution to comply with CBN Mobile Money Framework, Develop and design a network diagram for the primary site Datacenter and Disaster Recovery Site.

Ensure information assurance by transmitting secure data between classified systems; perform ethical hacking, malware reverse engineering, penetration testing, and Certification and Accreditation (C&A) within Security Operations Center (SOC) environment. Draft technical manuals, installation manuals, installation progress updates, and incident response plans in order to enhance system security documentation; create required system compliance reports and information requests.

POLICY DEVELOPMENT

I developed Information Security policy and IT Security Operational procedure I developed password policy, backup policy, disaster recovery policy and procedure KEY MANAGEMENT SYSTEM

Deployment of HSM (Key management)& Key management Policy & operational procedure NETWORK MANAGEMENT

Re-designed the office Network Implemented Active Directory 2008 This helps to manage users and automated backup for all systems Re-designed network diagram for the primary site data-center Re-designed network diagram for the

secondary site data-center Re-designed network diagram for the DR site data-center

Implemented Security at the network Layer for all the sites the primary, secondary and DR data center sites

PENETRATION TEST

Conduct penetration test yearly as stated in the Information security policy Conduct Vulnerability test quarterly

SERVER MANAGEMENT

I ensured server installation conform to the documented server specification Implemented server based IPS/IDS

Deployment of Security Solutions---Solutions for Web servers, Deployment of Security Solutions--- Solutions for Application Servers Deployment of Security Solutions--- Solutions for Database Servers DATABASE MANAGEMENT

Implement end to end databases solution for all servers BOA-BANK OF AGRIC PROJECT:

Job Role: Lead Information Security & Risk Engineer for Cellulant Nigeria My Responsibilities

Implementing End to End Security Solution for Bank of Agric in the following areas Server Hardening, Enforce 3 Tier architecture design, Security solution for the Web Access channels Database Hardening, Implementation of Access Control and Enforcement, penetration testing GES-GROWTH ENHANCEMENT SCHEME PROJECT (For the Federal Government farmer Subsidy Project). Job Role: Lead Information Security & Risk Engineer for Cellulant Nigeria Responsibilities includes:

Implementing End to End Security Solution for GES-Growth Enhancement Scheme. The solution was implemented on all access channels End to end security solution on the web.

End to end security solution on the IVR.

End to end security solution on the USSD.

.

EDUCATION AND QUALIFICATIONS

Bachelor in IT

Security Grade: 2:1

SMC (SWISS MANAGEMENT CENTER) University zug Switzerland. Completion Date: Dec 2014

Bsc Pure Physics with Instrumentation (Option)

Grade: Satisfaction

Olabisi Onabanjo University Ogun State

Completion Date: Dec 2008

Isheri Grammar School

Grade: Satisfaction

Isheri-oke, Ojodu Berger, Lagos State

Completion Date: Dec 2008

Shadel Montessori School

Grade: Satisfaction

Isheri-oke, Ojodu Berger, Lagos State

Completion Date: Dec 2008

Contact this candidate