Cybersecurity Portfolio Reporting Analyst

ONYEMA KALU

Cybersecurity Portfolio Reporting Analyst

US Citizen, with an Active Secret Clearance

Phone no: +1-478-***-****

Fort Worth, TX Email: *********@*****.***

Summary

Cybersecurity Portfolio Reporting Analyst with 5+ years of experience supporting cybersecurity operations, security governance, risk management, executive reporting, and technology portfolio initiatives across enterprise and U.S. Government environments. Experienced in analyzing cybersecurity data, developing security dashboards, scorecards, metrics, and leadership reports to support strategic decision-making. Skilled in cybersecurity risk assessment, Identity Governance and Administration (IGA), IAM controls, vulnerability management, incident reporting, compliance monitoring, and cross- functional stakeholder collaboration. Experienced translating complex technical security information into concise executive communications while supporting governance processes, continuous improvement initiatives, and cybersecurity program effectiveness. Proficient with Microsoft Sentinel, Splunk, Microsoft Defender, Power BI, KQL, security reporting platforms, and GRC-aligned frameworks including NIST CSF, RMF, and ISO 27001. Technical Skills

• Cybersecurity Governance & Portfolio Reporting: Cybersecurity Governance, Security Portfolio Management, Cyber Risk Reporting, Executive Reporting, Security Metrics, KPI Dashboards, Security Scorecards, Performance Reporting, Governance Materials, Leadership Presentations, Strategic Planning Support, Security Program Tracking, Continuous Improvement

• Risk Management & Compliance: Cyber Risk Assessment, Risk Registers, Risk Mitigation Tracking, Vulnerability Management, Control Assessment, Security Compliance, GRC Processes, Incident Reporting, Crisis Management Support, Security Documentation, NIST CSF, NIST SP 800-53, RMF, ISO 27001, CIS Controls

• Identity Governance & Access Management: Identity Governance and Administration (IGA), Identity and Access Management (IAM), Microsoft Entra ID, Access Reviews, RBAC, Privileged Access Management (PAM), Authentication Controls, Least Privilege Access, User Lifecycle Management

• Security Operations & Threat Management: Security Monitoring, Threat Detection, Incident Response, Security Investigations, Threat Analysis, IOC Analysis, Root Cause Analysis, Security Event Correlation, Security Reporting, Threat Intelligence

• Security Analytics & Reporting Tools: Microsoft Sentinel, Splunk Enterprise Security, Splunk, ArcSight, LogRhythm, Microsoft Defender XDR, Defender for Cloud, KQL, SPL, Power BI, Security Dashboards, Data Visualization, Trend Analysis

• Cloud, Infrastructure & Emerging Security: Azure Security, AWS Security, Cloud Security Monitoring, Hybrid Cloud Security, Zero Trust Architecture, Network Security Controls, OT/ICS Cybersecurity Awareness, Critical Infrastructure Security Concepts

• Automation & Data Analysis: Python, PowerShell, Bash, Excel Reporting, Dashboard Automation, Data Analysis, API Integration, SOAR Workflows, Ansible, Terraform

Certifications

• CompTIA Security+

• Certified Information Systems Auditor (CISA).

• CyberArk Defender PAM

• AWS Solution Architect

Professional Experience

Amazon Aug 2025 – Till Date

Cybersecurity Portfolio Reporting Analyst

• Analyze cybersecurity operational data, security events, risk indicators, and performance metrics to support cybersecurity portfolio reporting and leadership decision-making.

• Develop executive-ready dashboards, security scorecards, and reporting materials using security monitoring data from Microsoft Sentinel, Defender for Cloud, and enterprise security platforms.

• Translate complex cybersecurity findings into concise reports highlighting risks, trends, operational gaps, dependencies, and improvement opportunities.

• Support cybersecurity governance activities by tracking security initiatives, remediation activities, vulnerabilities, and operational performance across multiple workstreams.

• Collaborate with engineering, security operations, and business stakeholders to collect reporting inputs and improve cybersecurity visibility.

• Support Identity Governance and IAM reporting activities including access control reviews, authentication monitoring, and security control effectiveness tracking.

• Analyze cybersecurity risks and operational trends to identify improvement opportunities and support strategic planning initiatives.

• Assist with security incident reporting, crisis management documentation, and leadership communications.

• Improved cybersecurity reporting efficiency by 80% through automation of monitoring reports, standardized dashboards, and streamlined data collection processes.

• Reduced recurring security issues by 25% through improved risk tracking, trend analysis, and proactive remediation reporting.

Accenture Federal Services, St. Louis, MO. Jan 2024 – Jun 2025 Cybersecurity Governance & Risk Reporting Analyst

• Supported cybersecurity governance and portfolio management activities by developing security reports, metrics, dashboards, and operational performance summaries.

• Produced executive-level cybersecurity reporting materials translating technical findings into actionable business insights for senior stakeholders.

• Analyzed security monitoring data from Microsoft Sentinel, Splunk Enterprise Security, ArcSight, and LogRhythm to identify risks, trends, and operational improvements.

• Managed cybersecurity metrics including incident trends, vulnerability status, remediation progress, and security control effectiveness.

• Supported risk management activities through vulnerability analysis, security assessments, risk documentation, and remediation tracking.

• Collaborated with engineering, product, and operational teams to consolidate reporting inputs and support cybersecurity program initiatives.

• Supported Identity Governance activities including IAM reviews, RBAC validation, access control monitoring, and least privilege enforcement.

• Assisted with cybersecurity compliance reporting aligned with NIST CSF, RMF, ISO 27001, and federal security requirements.

• Developed dashboards, KQL/SPL queries, and reporting workflows improving visibility into security operations and technology risks.

• Improved cybersecurity visibility by 25% through enhanced security dashboards, optimized reporting processes, and improved metric tracking.

• Reduced security investigation turnaround time by 30% through automation, standardized reporting workflows, and improved data analysis processes.

US Army, Fort Leonard Wood, MO Oct 2019 – Dec 2023 Cybersecurity Risk & Compliance Analyst

• Supported cybersecurity governance, risk management, and compliance activities across enterprise and classified environments.

• Prepared cybersecurity reports, assessment documentation, compliance evidence, and operational security updates for leadership review.

• Conducted vulnerability assessments using ACAS, Nessus, and Qualys while tracking remediation activities and security improvement initiatives.

• Analyzed cybersecurity risks, control gaps, vulnerabilities, and dependencies to support risk mitigation decisions.

• Supported IAM governance activities including access control reviews, authentication monitoring, RBAC validation, and security documentation.

• Maintained cybersecurity metrics, operational reports, and security documentation supporting continuous monitoring requirements.

• Assisted with incident reporting, root cause analysis, and cybersecurity event documentation.

• Collaborated with technical teams to identify security gaps and implement improvements across infrastructure environments.

• Supported cybersecurity readiness activities achieving 100% assessment readiness through improved documentation management, reporting accuracy, and evidence tracking.

• Reduced recurring vulnerabilities by 20% through proactive risk tracking, remediation coordination, and security improvement initiatives.

Ashu-Cam Tech, Dallas, TX May 2017 – Sept 2019

Cybersecurity Analyst Network Security Analyst

• Supported cybersecurity monitoring, risk analysis, and security reporting activities for enterprise technology environments.

• Analyzed security alerts, network events, and vulnerability findings to identify risks and recommend remediation actions.

• Assisted with vulnerability management activities using Nessus and Nmap, documenting findings and tracking remediation progress.

• Supported security documentation, compliance reporting, and operational improvement initiatives.

• Prepared security summaries and technical reports to communicate findings to infrastructure and security teams.

• Collaborated with engineering teams to improve security controls and strengthen cybersecurity posture. Military Service

US Army Veteran - Honorably discharged.

Education

• Master of Science in Information Technology

Middle Georgia State University

Contact this candidate