OsenOsagie

Objective: Develop, review, and align cybersecurity policies with organizational needs, compliance obligations, and industry standards.

Process: I moved from baseline research through inventory, gap analysis, drafting, peer review, and final delivery.

Result: Produced policy governance libraries grouped by baseline and compliance-specific needs. Delivered gap analysis findings with remediation recommendations. Updated standards for MFA, vendor onboarding, and current compliance expectations.

Objective: Conduct a comprehensive cybersecurity assessment and translate control gaps into business-focused recommendations.

Process: I scoped critical systems, mapped frameworks into one control view, gathered evidence, tested controls, ranked risk, and shaped the final report.

Result: Created an internal audit report with executive summary and technical appendix. Identified gaps such as limited log monitoring and backup RPO weaknesses. Prioritized remediation by business impact, likelihood, and compliance consequences.

Objective: Run a structured cybersecurity risk assessment covering assets, threats, vulnerabilities, scoring, and treatment planning.

Process: I converted risk discovery into a prioritized register with clear treatment paths across mitigation, transfer, acceptance, and avoidance.

Result: Built a risk register across data, systems, and business-process assets. Assessed threats including malware, phishing, insider misuse, and supply-chain attacks. Created a risk treatment plan that connected decisions to business context.

Objective: Evaluate suppliers and third-party vendors for cybersecurity risk, control maturity, and onboarding readiness.

Process: I identified vendors, built assessment questionnaires, reviewed security documentation, scored risk, and shaped monitoring recommendations.

Result: Delivered a third-party risk assessment report and vendor rating matrix. Recommended contractual controls, remediation requests, and ongoing monitoring steps. Created an onboarding and monitoring framework for repeatable vendor reviews.

Objective: Develop an incident response capability and validate the response workflow through tabletop exercises.

Process: I created incident response policy, built phishing, ransomware, and insider-threat playbooks, facilitated a tabletop, and captured lessons learned.

Result: Delivered an incident response plan with scenario-specific playbooks. Produced an after-action report that translated exercise observations into improvements. Strengthened crisis coordination, documentation, and escalation readiness.

Objective: Improve organizational security awareness through structured training materials, sessions, and learning evaluation.

Process: I assessed training needs, developed presentations, posters, and quizzes, delivered sessions, and evaluated learning outcomes.

Result: Built awareness content focused on practical, everyday cyber risk. Supported safer user behavior through structured education and assessment. Strengthened public speaking, training delivery, and security communication skills.

Objective: Review vulnerability findings and prioritize remediation activity according to severity, exposure, and operational impact.

Process: I analyzed penetration testing reports, categorized findings, developed remediation strategy, and tracked progress across fixes.

Result: Created a vulnerability register with critical, high, medium, and low findings. Defined remediation actions including patching, configuration hardening, and segmentation. Improved the path from technical finding to tracked security improvement.

Objective: Compare major cybersecurity frameworks and recommend adoption strategies that fit governance and control needs.

Process: I studied ISO/IEC 27001, CIS Controls v8.1, and NIST CSF 2.0, then cross-mapped common control expectations into recommendations.

Result: Built a control mapping matrix across leading cybersecurity frameworks. Reduced duplicate control language by grouping overlapping expectations. Produced recommendations for framework adoption and implementation strategy.

Objective: Develop business continuity and disaster recovery capabilities aligned to critical business operations and recovery targets.

Process: I conducted business impact analysis, identified RTO and RPO needs, designed recovery strategies, built a BC/DR plan, and recommended exercises.

Result: Documented critical business functions and recovery expectations. Recommended backup, alternate-site, cloud recovery, and simulation strategies. Connected IT recovery planning to operational resilience and business priorities.