Risk Management Cloud Security

BLOSSOM OBIEJEZIE

Dallas, TX (***) *** - **** **************@*****.*** LinkedIn:

[www.Linkedin.com/in/blossom-o-921a6b151]

EXECUTIVE SUMMARY

GRC Analyst with experience in risk management, compliance, and cloud security governance. Expertise in regulatory compliance, conducting risk assessments, and implementing security frameworks (ISO 27001, NIST CSF, SOC 2). Skilled in developing security policies, enforcing compliance controls, and collaborating with cross-functional teams to enhance security posture. Focused on improving organizational security through proactive risk identification, mitigation, and governance best practices.

CORE COMPETENCIES

• Governance, Risk & Compliance (GRC) • Risk Assessment & Mitigation

• Security Policy Development • Compliance Frameworks (ISO 27001, NIST, PCI-DSS, SOC 2)

• Cloud Security & Compliance • Third-Party Risk Management

• Audit & Compliance Reporting • Incident Response & Risk Management

• Security Awareness Training • Regulatory Compliance (GDPR, CCPA) PROFESSIONAL EXPERIENCE

GRC Analyst E-PANZER COMPUTER SECURITY CONSULTING January 2022 – Present

• Conduct risk assessments and security audits to ensure compliance with ISO 27001, NIST CSF, and SOC 2 frameworks.

• Developed and enforced governance policies for cloud security, risk management, and compliance.

• Led vendor risk assessments, ensuring adherence to security standards and compliance requirements.

• Implemented cloud security controls and continuous monitoring solutions to mitigate security threats.

• Provided training on security best practices and compliance frameworks to internal teams. Conducted security gap analysis and recommended risk mitigation strategies to enhance compliance.

• Spearheaded regulatory compliance initiatives, ensuring adherence to PCI-DSS, GDPR, and HIPAA requirements.

Cloud Compliance Analyst QUALITY PACKAGING LLC January 2021 - December 2021

• Assisted in security governance initiatives by implementing compliance monitoring solutions.

• Conducted risk analysis and reviewed security policies to align with compliance frameworks.

• Implemented AWS CloudWatch for monitoring and alerting, ensuring compliance with cloud security policies.

• Designed and deployed secure VPC architectures following AWS best practices. Provided compliance reporting and assisted with audit documentation for regulatory adherence.

CERTIFICATIONS

• Certified Information Systems Security Professional (CISSP) (In Progress)

• Certified Information Security Manager (CISM) (In Progress)

• CompTIA Security+

• AWS Certified Cloud Practitioner

• Certified FinOps Practitioner

• Cisco Certified Network Associate (CCNA)

TOOLS & TECHNOLOGIES

• GRC Tools: ServiceNow, RSA Archer

• Cloud Security: AWS Security Hub, Azure Security Center

• Risk Management: NIST CSF, ISO 27001, PCI-DSS, SOC 2, GDPR

• SIEM & Monitoring: Splunk, AWS CloudWatch

EDUCATION

LLB Law University of Jos

PROJECTS

• Developed security compliance policies aligned with NIST CSF and ISO 27001.

• Conducted third-party risk assessments and enforced compliance requirements.

• Led security awareness training to improve organizational risk posture.

• Implemented cloud security controls to strengthen compliance adherence.

Contact this candidate