Admaa Sixtus

WORK HISTORY

EDUCATION

ABOUT ADMAA SIXTUS

With 9+ years experience in information security, I specialise in strengthening organisational security posture through governance, risk management and compliance (GRC). In my role at Arup, I support ISO 27001 aligned security governance, helping teams implement pragmatic controls, evidence assurance and risk treatment that stand up to audit scrutiny. I work closely with delivery and operational stakeholders to translate security requirements into clear actions, ownership and measurable improvement.My expertise spans risk assessment, third party due diligence, control design and security assurance across complex, cloud enabled environments. I align internal security controls to regulatory and contractual expectations, including GDPR and government and regulated sector requirements. I have hands on experience with GRC platforms such as ServiceNow and OneTrust, and I bring an informed view of cloud security across Azure and AWS to support secure by design decision making without overcomplicating delivery.I hold CISSP, CISM, CISA and CRISC certifications and apply frameworks such as ISO 27001 and NIST to deliver practical, business aligned outcomes. I am known for calm, collaborative problem solving, strong stakeholder engagement and clear communication, helping teams protect confidentiality, integrity and availability while enabling delivery at pace.