Chichi Omeni

About Chichi Omeni

Clearable GRC/Cloud Security Analyst with over 6 years of experience in IT security, governance, risk, and compliance across diverse sectors. With proven track record of strengthening organizational security postures and driving alignment with major regulatory frameworks including SOX, SOC 2, HIPAA, GDPR, PCI-DSS, FERPA, GLBA, and NIST 800-53.In my current role, I serve as a GRC and Cloud Security Analyst specializing in security and compliance validation for GCP and AWS environments. I ensure governance and regulatory alignment for infrastructure provisioned through Terraform (IaC) by conducting security reviews against internal security baselines and control frameworks. This includes validating encryption (CMEK, KMS), IAM configurations (service accounts, workload identities), network segmentation (VPCs, firewall rules), and logging pipelines, ensuring proper offloading to SIEM platforms like Splunk. I also assess CI/CD pipeline security, confirm the presence of threat modeling documentation, and prepare solutions for regulatory audit readiness. My work integrates governance, risk management, and compliance (GRC) principles to safeguard assets, mitigate risks, and strengthen enterprise wide security posture.My previous role as a Senior GRC Analyst at 360 Tech Hub Inc, Dallas, TX, highlights my expertise in safeguarding IT infrastructure through advanced security policies and collaborating with cross-functional teams to mitigate risks associated with internal and external IT assets, including cloud solutions such as AWS and Azure. Proficient in Archer, ServiceNow, Active Directory, JIRA, and Confluence, I bring hands-on experience in documentation, project tracking, and transparent communication across security projects. I’ve consistently delivered effective solutions for risk management, control testing, and audit procedures.Committed to continuous learning, I remain updated on evolving regulations and technologies and excel at enhancing security compliance frameworks to ensure alignment with industry best practices. Skilled in leveraging Excel, SQL, and Python for data-driven risk reporting, I help leadership make informed decisions on IT governance. If you’re looking for a proactive GRC professional with a strategic mindset and a strong foundation in IT compliance, let’s connect.

Experience

1. Senior Information Security Cloud Specialist

   Publicis Sapient

   Jan 2025 — Present · NY, US

   Conduct end-to-end security reviews of GCP and AWS infrastructure deployed via Terraform, ensuring alignment with internal security baselines, control requirements, and external frameworks such as ISO 27001, NIST, and FedRAMP. Responsibilities include validating IAM roles, service accounts, CMEK/KMS encryption, network segmentation (VPCs, firewalls, PSA), and CI/CD pipeline compliance. Assess solutions against established controls while proactively identifying threats, proposing mitigation strategies, and driving remediation of high-risk vulnerabilities in collaboration with engineering teams. Ensure logging is properly configured and offloaded to centralized platforms like Splunk, support audits with evidence collection, and integrate policy-as-code into DevOps workflows. Standardize secure, reusable cloud modules across environments to strengthen overall security posture.

Education

• Western Governors University

  Master of Science - MS, Cybersecurity and information Assurance

• Enugu State University of Science and Technology

  Bachelor's degree