Fnu Joseph Ngwa
Grc Analyst @State Of Texas
Signup · Get unlimited contacts
WORK HISTORY
Grc Analyst @State Of Texas
Supported cross-agency cybersecurity initiatives by aligning information systems with key frameworks, including NIST 800-53, TAC 202, ISO 27001, PCI DSS, and SOC 2 (SSAE 18). I worked closely with internal teams and external vendors to strengthen security posture, improve audit readiness, and drive compliance with federal and state regulations.My core responsibilities included conducting IT risk assessments, mapping security controls, and performing gap analyses across state-owned and third-party systems. I reviewed and validated SOC 2 Type I and II reports, assessed vendor risk, and helped ensure contractual and operational security alignment. I also developed governance documentation—including System Security Plans (SSPs), POA & Ms, and Security Assessment Reports (SARs)—to support system authorizations and audits.Key Achievements:Conducted 15+ IT risk and gap assessments using NIST 800-53 and ISO 27001, identifying control weaknesses and developing mitigation strategiesReviewed and mapped SOC 2 reports for third-party vendors, helping ensure proper risk ratings and reducing onboarding risks by 50%Supported PCI DSS compliance efforts across agency systems, aligning remediation actions with scan results and control testing requirementsMapped organizational controls to ISO 27001 Annex A and developed internal control documentation for future certification initiativesImproved POA & M lifecycle tracking, reducing average remediation closure time by 40% and improving visibility across high-impact systemsAuthored and updated GRC documentation (SSPs, POA & Ms, risk registers), streamlining audit preparation for internal and external stakeholdersEnhanced vendor risk management by introducing standardized evaluation criteria and reporting formats aligned with state data security policies
EDUCATION
University of Yaoundé
Bachelor's degree
ABOUT FNU JOSEPH NGWA
I’m Fnu Joseph Ngwa, a risk and compliance professional with…
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.