Joseph Ikyume

About Joseph Ikyume

About Me ‍ Governance, Risk & Compliance Analyst with 6+ years’ experience in…

Experience

1. Cybersecurity Compliance Analyst

   Axos Financial

   Jul 2023 — Present

   Orchestrate GLBA, SOX, PCI-DSS, and SOC 2 control monitoring across lines of business; maintain the risk register, track issues/CAPAs, and brief leadership on residual risk and treatment plans.• Lead quarterly user access reviews for sensitive applications; coordinate attestations with control owners, reconcile exceptions, and document evidence for internal/external audit.• Run the policy/standard lifecycle (draft, review, approval, publication); align with NIST 800-53, ISO 27001 Annex A, and FFIEC expectations; retire duplicates and close gaps.• Drive third-party risk due diligence: review SOC 2 reports, SIG questionnaires, and security addenda; capture findings, risk-rank gaps, and obtain remediation commitments.• Produce board-facing compliance reports and KRIs/KPIs (control health, overdue actions, policy exceptions, TPRM status) using GRC dashboards and audit workpapers.• Coordinate audit readiness: map controls to framework requirements, compile samples, manage PBC lists, and host walkthroughs with auditors and process owners.• Support incident documentation for the SOC function: log events, track containment/eradication steps, compile after-action items, and verify control follow-through.• Run awareness and targeted micro-trainings with HR/Legal (phishing etiquette, acceptable use, data handling); track completion and knowledge checks.• Standardize exception and risk-acceptance processes, ensuring approvals, expiry tracking, periodic review, and rollback plans are in place.