Details
Skills
SKILLS
Governance, Risk & Compliance (GRC)
- ISO/IEC 27001/27002 ISMS implementation: scope, asset inventory, risk register, risk treatment plan, Statement of Applicability, Annex A controls
- Risk assessment, gap analysis, policy and procedure writing, evidence collection, audit readiness
- Frameworks: NIST CSF 2.0, NIST SP 800-30 and 800-61, CIS Controls, MITRE ATT&CK, ISO/IEC 42001, NIST AI RMF
IT & Networking
- 6 years of IT support: hardware, software, network and account troubleshooting
- LAN/WAN and Wi-Fi administration; router, switch and access point configuration with secure settings
- TCP/IP, DNS, DHCP; backups and data protection; endpoint setup and maintenance
- Windows, Linux (command line, permissions, services, SSH hardening), Microsoft 365
Security Operations (hands-on practice)
- SIEM alert triage and log analysis (Windows Event Logs, Sysmon, network traffic)
- Phishing email analysis and IOC extraction
- Incident response lifecycle and incident documentation (NIST SP 800-61)
Vulnerability Management (hands-on practice)
- Nessus Essentials, OpenVAS, Nmap, Wireshark, Burp Suite
- Scan analysis, risk-based prioritization, remediation reporting
Professional
- Technical reports and documentation for technical and non-technical readers
- Team leadership, stakeholder communication, emergency response coordination
About
Cybersecurity practitioner with a strong foundation in IT and ISO based governance. Brings 6 years of IT support and network administration with an international NGO, securing LAN/Wi-Fi networks, endpoints and backups across distributed field offices. Certified ISO/IEC 27001 Lead Implementer with practical experience building ISMS documentation (risk register, risk treatment plan, Statement of Applicability, security policies) and maintaining audit-ready records in compliance driven environments. Also holds CompTIA Security+, eJPT and Blue Team Level 1 (BTL1), with hands on practice in SIEM alert triage, log analysis, phishing investigation and vulnerability scanning. Skilled at explaining technical risk to non technical stakeholders and continuing to grow in security operations and GRC. Completing AI governance training (ISO/IEC 42001, NIST AI RMF).
Profile Photo
