Henry Dukeh

About Henry Dukeh

Senior GRC, IT Risk, and Security Compliance leader with 12+ years of global experience building and scaling enterprise risk, cybersecurity, privacy, and third-party risk programs across highly regulated environments. I specialize in aligning governance and risk frameworks with business strategy while enabling secure, compliant growth across distributed and remote organizations.I’ve led global risk initiatives across North America, EMEA, LATAM, and APAC, partnering closely with executive leadership, engineering, cloud, product, legal, and audit teams to translate complex technical and regulatory risks into clear, actionable insights. My background spans ERM, operational risk, information security, privacy, AI governance, cloud security, and vendor risk management, with deep hands-on experience across NIST, ISO, and global regulatory frameworks.Known for building practical, scalable risk programs, strengthening the Three Lines of Defense, and delivering board-ready reporting that drives informed decision-making. Actively seeking remote senior GRC / IT Risk / Security Compliance roles where I can help organizations strengthen resilience, trust, and regulatory confidence.

Experience

1. Lead - Global IT & Third-party Risk Management

   Brink’s Inc

   Jan 2024 — Present · TX, US

   Lead global IT, cybersecurity, privacy, and third-party risk programs across North America, EMEA, LATAM, and APAC, delivering executive-level risk visibility and decision support.Conduct security risk assessments for applications, cloud services, SaaS platforms, integrations, and AI tools, ensuring alignment with NIST CSF and CIS Controls prior to production release.Review solution architectures from a security and risk perspective, focusing on IAM, data protection, API security, encryption, and secure integration patterns.Own security assurance, control validation, and formal risk acceptance processes, providing documented risk sign-off for leadership and audit stakeholders.Lead third-party and privacy risk assessments, validating SOC 2, CAIQ, and regulatory due diligence for vendors handling regulated or customer data.

Education

• University of Agriculture, Abeokuta

  B.S., Environmental Science

• Massachusetts Institute of Technology

  Professional Certificate, Cybersecurity

• Middlesex University

  Master of Science - MS, Environmental Technology