David Alfred Addai

About David Alfred Addai

A highly skilled and results oriented Cybersecurity Professional with a proven track record of investigating and mitigating cybersecurity incidents, breaches, and vulnerabilities impacting businesses, services, and individuals. Proficient in security assessments, governance, risk management, compliance (GRC), and vulnerability management, with extensive experience in aligning cybersecurity strategies with organizational goals to ensure the Confidentiality, Integrity, and Availability (CIA) of information systems.Adept at monitoring data, detecting and analyzing threats, responding to security incidents, and implementing industry standard security controls. Well versed in Security Assessment and Authorization (SA & A) processes, utilizing frameworks and standards such as NIST, FISMA, FedRAMP, RMF, ITGC, SOX Compliance, and PCI DSS. Experienced in managing compliance with data privacy regulations and implementing effective governance and risk mitigation strategies across enterprise environments.Strong expertise in vendor risk assessments and system administration, assessing risks in complex vendor ecosystems, and mitigating them to ensure compliance with industry standards and regulatory requirements. Skilled at collaborating with system stakeholders to develop and execute information security strategies to safeguard enterprise information systems, networks, data, and operational processes.Proficient in deploying and managing next-generation cybersecurity tools and processes to proactively defend against evolving threats. With a solid background in Federal Risk and Authorization Management Program (FedRAMP) and Federal Information Security Management Act (FISMA) compliance, I am committed to bridging the gap between technical systems and risk management, ensuring enterprise security and adherence to regulatory frameworks.Ready to bring exceptional value to an organization by leveraging my robust experience, technical acumen, and a results driven approach to protect critical assets, enhance compliance, and strengthen overall cybersecurity posture.

Experience

1. Senior Analyst Governance Risk and Compliance Analyst (Grc) - Pci- Dss Lead

   Lambda

   Jan 2021 — Present · US

   Participates in the development of security awareness training and phishing campaigns for the whole organization. Collect the data for analysis and improve the security posture of the organization. Leads and coordinates audit-related tasks specifically for PCI-DSS 4.0 to ensure the readiness for audit testing with both internal personnel and external auditors. Contributes to the development of audit process improvements. Leads the roadmap and transition from PCI-DSS 3.2.1 to PCI-DSS 4.0, imbibing the changes and educating stakeholders. Stay up to date with industry trends and best practices, including monitoring for changes in PCI-DSS and recommending necessary adjustments to the compliance program. Assist with vendor management program utilizing CyberGRX. Assists in conducting quarterly SOX reviews, i.e, KC81 and KC102.Performs risk assessments, audits, and tests to ensure the systems and processes remain in compliance with applicable regulations, PCI-DSS, SOX, and internal information security management policies, ensuring that required evidence is collected and maintained as required to meet compliance objectives.

Education

• University of Education

  Bachelor of Science - BS, Information Technology