Resume

Information Security Officer

Location:

Halifax, NS, Canada

Salary:

110

Posted:

April 03, 2023

Contact this candidate

Resume:

Ebenezer Owusu-Afriyie

CISM, CISA, CDPSE, CEH, ECSA, C CISO, ISO 27001:2013 LA

PROFILE

Over 14 years of networking, GRC and Security/Privacy experience.

Computer system, information technology and Information Security Management educated.

Collaborative, approachable, positive and authentic.

Extensive experience including;

oWorking with multiple vendors and open-source technologies.

oInformation Security Auditing/Implementing ISO27001 framework and conducting ISO27001 Certification Audits

oVendor Risk Assessment

oDeveloping robust information security architectures with an Agile Project Management delivery methodology and assisting in the development of client IT and security strategies.

oImplementing ISO27001 and provided training for clients

oCyber security workshops, vendor and risk assessments.

Track record of building successful relationship across all organizational levels, high achievement and motivation.

Experience working with, reporting to, and managing geographically dispersed teams.

PROFESSIONAL EXPERIENCE

MUFG Investor Services

Associate Director, IT, Information Security Manager

Oct 2022 Present

Tasks summary:

Conducting Vendor and monitoring Risk Assessment

Administer security awareness training assignments and follow-up for annual training, new joiners (incl. Contractors) and long-term leave returnees. Streamline and document the process followed.

Provide support in carrying out systems assessments using the SISRA module in the vendor portal, documenting the rationale for assessment points, following up with the owner, etc. and determining any issues that should be documented clearly in our vendor portal.

ISMS / Security frameworks lead – ISO 27001, NIST Cyber Security Framework

oDriving the adoption of these standards at a global level

oOperating an Information Security Management System (ISMS) - the global management system for information security which drives our security posture

oEngagement across multiple departments / teams, to secure their support in the adoption and operation of controls required

Policy & Procedures – review, development and implementation

oManagement of the information security policy suite - annual review, updates in line with risk posture / ISMS requirements

oProviding guidance to IT Security Operations in the development of Information Security Procedure documents

Security risk management – framework development, implementation and risk identification facilitation

oDevelopment and implementation of an appropriate framework for the timely identification of information security and related risk

oEngagement with internal teams, such as Operational Risk, to ensure alignment and consistency in the assessment of risk

KPI and KRI development – monthly reporting to CRC, EC and Information Security Governance Committee

oDevelopment of metrics - both KPIs and KRIs - to provide timely and accurate reporting on performance to internal committees and Boards

Third party security assurance – operating on-going assurance processes

oIn conjunction with Vendor Management, developing and implementing a security assurance process for ensuring that appropriate information security assurance is obtained from vendors where information security is a requirement

Data Privacy

oSupporting the Data Protection Officer in meeting the security requirements of relevant privacy legislation through the design and operation of effective controls

MUFG Investor Services

Information Security Manager

Dec 2019 Oct 2022