Stanley Nonso

Information Security Analyst @Investis Digital

I created a risk treatment plan using ISO27001 standards which was used by the organization to carry out risk assessments and compliance analysis across all areas of the business.• I managed the entire Vendor Risk Management Framework using One Trust as a tool, and Bitsight as a Security Rating tool.• I analyzed all our business processes to ensure that we follow the NIST security framework as well as internal organizational standards.• I supported the renewal of the organization’s ISO27001 certification.• I handled the Security Compliance Assessment of the organization’s third-party vendors/suppliers, ensuring they comply with Security standards and Data Privacy regulations.• I created a workflow process that made compliance due diligence within the organization very seamless.• I reviewed vendor risk reports highlighting cybersecurity impacts.• I reviewed attestations by third parties such as SOC1, SOC2, ISO27001 highlighting any observations for further review and tracking.• Based on the responses to the compliance questionnaire, I carried out risk assessments of their business processes and procedures.• Using a Risk Management tool, I managed the Risk backlog and took actions to remediate all open risks.• I created risk review documentation and used a risk tiering formula to prioritize for remediation the risks identified based on their severity.• Worked very closely with the Legal team during third-party negotiation sessions to ensure contracts were compliant with our security objectives.• Maintained the compliance risk backlog ensuring that all open risk was brought within acceptable risk levels.• I identified all applications and application owners and carried out vulnerability assessments on the applications.• Conducted risk analysis on the current cybersecurity landscape, identified the vulnerabilities, and analyzed appropriate security.