Uchechi Kezie

About Uchechi Kezie

Security & Compliance Analyst with over 5 years of experience in evaluating, auditing, and improving control systems in compliance with industry standards such as NIST, ISO 27001, and IEC 62443. I specialize in safeguarding organizations by managing and mitigating risks associated with information technology, compliance, and regulatory standards. With a foundation in both risk management and compliance frameworks, I excel at identifying vulnerabilities, enforcing data protection measures, and ensuring adherence to industry regulations to support organizational integrity and resilience. I have Technical skills in performing risk assessments, developing security controls, and ensuring system integrity. I have specialty in Security Assurance, Control Testing, Control Designing, Control Implementation, Cyber security, Remediation, internal controls, business risk, and the review of systems, applications, and IT processes. Identify risks, develop recommendations to mitigate risks. I also specialize to participate in reviews of internal controls and security of systems under development, as well as major IT projects and initiatives, using knowledge of the current IT environment and industry trends to identify and advise management on potential issues and risks. I also have working knowledge of FISMA, NIST 800-37 Risk Management Framework (RMF), NIST 800-53, NIST 800-171, NIST CF, HITRUST CSF, ISO Series, PCI DSS, SOX, POA & M Management, creating security artifacts, and Continuous Monitoring of security systems, Vulnerability Management, DLP, and Security Operations.Skills include- Risk Assessment - Report Writing - SOC 2 Renewal/Certification- Security Questionnaires - Sig lite/core- Risk Mitigation- PCI-DSS- ISO 27001- HIPAA- Security Questionnaires- Business Impact Analysis / Disaster Recovery/Business Continuity- Vendor Risk Assessment- Policy Review- Conducting comprehensive risk assessments to identify potential security gaps- Analyzing and interpreting data to detect and respond to cyber threats- Developing and implementing security policies, procedures, and controls- Staying current with the latest cyber threats, trends, and technologies to ensure proactive defense mechanism.

Experience

1. Cyber Security Analyst

   PwC

   Jul 2023 — Present · US

   Integrated security into CI/CD pipelines using tools like Jenkins, GitLab CI, and Terraform to ensure automated security checks and policy enforcement.• Designed and implemented DevSecOps strategies in Python-based and open-source environments, embedding security at every phase of the SDLC.• Drafted security test cases and created proof-of-concept reports for penetration test findings• Developed and implemented remediation plans in collaboration with cross-functional teams, ensuring timely resolution of critical vulnerabilities• Identified critical vulnerabilities in IAM configurations and storage buckets, reducing potential breach risks• Conducted regular security assessments of SAP environments, ensuring access controls, role management, and system configurations aligned with compliance standards.• Supported governance initiatives by applying frameworks such as NIST 800-53, ISO 27001, CIS Benchmarks, and MITRE ATT & CK in enterprise environments.• Led vulnerability management efforts, performing risk assessments and ensuring timely remediation aligned with business and compliance priorities.• Contributed to data governance practices by ensuring secure handling, encryption, and classification of sensitive data.• Worked with IAM and access provisioning processes to ensure secure authentication across cloud and enterprise applications.• Develop, execute, and track the performance of security measures to protect information and network.• Partnered with SOC teams to monitor, triage, and respond to threats, using SIEM and endpoint security tools to improve detection and response times.• Utilized Jira and Azure DevOps to manage security tasks, documentation, and track remediation efforts across multiple projects.• Review security processes and procedures, Control Design, Control Mapping and manage security controls.