Princess Okoro, Information security

Check out Princess's expertise

A consultant with several years of experience specialised in information and cybersecurity management, compliance, IT security risk, IT auditing, and policy writing with 5 years of experience (CISM ), proven ISO 27001 Lead Implementation practice, with several successful implementation and certification project.

I provide advisory and consulting support to help organisations improve their security posture and adhere to security policies, expected controls & regulatory requirements.

I can support your organisation with:

ISO 27001, SOC 2, and NIST compliance framework implementation identifying the best solutions and managing the whole process (requirements identification, solution selection, implementation, documentation, certification).

Cyber Maturity Assessments: Conducting capability reviews through applying Information Security frameworks (e.g. NIST, ISO 27001, SOC2).

My skills in Information (IT) and Cybersecurity includes:

- Conducting cyber security assessments and gap analysis against various frameworks.

- Creation and implementation of a comprehensive compliance framework in the case of multi regulatory requirements

- Development of ISMS Policies, Procedures and relevant standards based on NIST guidelines or ISO 27001 including Incident Response Plan, Acceptable Use, Encryption Policy, Risk management, Audit logging, and monitoring policy, User account and access management, Asset management, Data Classification, Change Management, Vulnerability and patch management, Asset Disposal, Third-party Management, Security Configuration, and many more.

- Business Continuity Planning and Disaster Recovery Planning (BCP, DRP)

- IT audit, compliance audit

- Risk assessment,

- Information security awareness training and training material

- Compliance specific training (GDPR, SOC2, NIST. RISK management).

Please don't hesitate to contact me! My knowledge, experience, and skill can help you to achieve your goal and succeed!!

SocialHP

INFORMATION SECURITY AND COMPLIANCE LEAD

January 2022 - Today (2 years and 9 months)

Leading the implementation of SOC 2. Helped the organisation with the technical writing for policies and procedures. Responsible for implementations of all controls within The Security, Availability and Privacy Trust service Criteria.

Universal Weather and Aviation

INFORMATION SECURITY OFFICER

June 2021 - December 2021 (6 months)

Led the ISO27001 implementation and helped the organisation with the technical writing for policies and procedures to achieve ISO27001. I also supported the organisation through their stage 1 and stage 2 audit process and helped to correct non-conformities. The organisation is now ISO 27001 certified.

•Assessed the organisation against the requirements of ISO 27001 and created detailed gap assessment reports.

•Utilised existing framework to develop policies, processes and procedures to assist in their implementation.

•Facilitated and delivered ISO 27001 workshops, including risk assessment, internal auditing and business continuity requirements, etc.

•Advised on implementation of ISO focused controls required to address security risks.

•Supported the organisation with internal audits, management reviews and the documentation of audit reports.

•Maintained ISMS', corrective action logs, delivery trackers and client progress reports etc.

•Maintained and continual improvement of the information security management systems (ISMS).

FASSET

INFORMATION SECURITY SPECIALIST

April 2021 - June 2021 (2 months)

I led the implementation of the NIST Cyber Security Framework (CSF) by developing policies, procedures, and controls compliant with the NIST framework.

•Reviewed how adequate security controls are and proposed security improvements.

•Carried out maturity assessment and gap analysis against the NIST CSF framework

•Implemented security frameworks and risk management strategies and work required to help Fasset comply with NIST.

•Developed policies, procedures, and technical controls to deliver outcomes and recommendations for improving procedures and working processes.

Check out Princess's experience

Oghenero Ologide recommend Princess

Bachelor of Science

University of Greenwich

BSc (Hons) Computer Security and Forensics