Derek Alemnji

Grc Analyst @Credit One Bank

Las Vegas, NV, US

Develop, assess, and enforce Information Security Policies, conducting annual reviews and updates.• Perform continuous control testing to assess design and operational effectiveness.• Conduct internal audits for NIST CSF, CIS, ISO 27001, GDPR, and SOC 2, preparing for external audits.• Lead risk assessments for information systems and vendors, ensuring compliance with security frameworks.• Manage the enterprise risk register, develop mitigation strategies, and oversee remediation efforts.• Collaborate with external auditors, present audit artifacts, and coordinate remediation of audit findings.• Analyze audit reports, penetration tests, and vulnerability scans, mapping controls to mitigate risks.• Oversee third-party risk management, handling vendor security assessments and Trust Portal responses.• Participate in incident response, disaster recovery, and business continuity planning exercises.• Lead security awareness training programs for new and existing employees.

University of Buea

Bachelor's in Computer science