Cybersecurity Analyst

Conduct threat and vulnerability assessments using OSINT, geopolitical information, crime analytics, and regional threat data to identify location-specific risks. Evaluate physical, environmental, and operational exposures to support security planning and risk mitigation.

Review SOC reports, security policies, vulnerability reports, and compliance evidence during third-party security evaluations and vendor due diligence. Assess vendor controls for access management, vulnerability management, incident response, business continuity, and data protection.

Monitor regional instability, civil unrest, emerging threats, and event-related conditions for security intelligence and executive risk briefings. Use ChatGPT and Microsoft Copilot to support security questionnaire analysis, documentation review, and risk reporting.

Promoted from Security Delivery Associate to Security Analyst within six months. Strengthened enterprise access governance through least-privilege access review workflows across cloud and enterprise applications, reducing unauthorized access exposure by 30%.

Tested preventive, detective, and corrective controls against NIST and ISO 27001 guidelines, coordinated remediation with cross-functional teams, and validated corrective actions through follow-up testing. Contributed to a 25% reduction in compliance findings across ISO 27001, NIST, GDPR, and PCI DSS audit cycles.

Managed vulnerability assessments with Nessus, Qualys, and OpenVAS, reducing critical risk exposure across production systems by 35%. Conducted Splunk SIEM and IDS-log incident triage aligned to the NIST Incident Response lifecycle, accelerating containment timelines by 20%.

Evaluated third-party controls and mapped vendor practices to NIST CSF, ISO 27001, PCI DSS, GDPR, and HIPAA. Supported AI-assisted vendor control mapping, threat research, executive risk summaries, and compliance documentation with human review.

Administered IAM provisioning and deprovisioning workflows across Windows, Linux, and enterprise platforms. Monitored privilege escalations and enforced access-validation controls, lowering unauthorized access incidents by 28%.

Executed security control testing for endpoint security and risk assessments mapped to ISO 27001 and GDPR, reducing compliance remediation turnaround time by 22%. Collaborated with GRC and vendor-risk teams to evaluate third-party security posture and improve compliance visibility.

Supported SAST and DAST remediation and IPS rule testing across cloud environments, contributing to a 26% reduction in high-severity vulnerabilities and stronger secure development lifecycle alignment.

GPA: 3.8/4.0.

GPA: 3.5/4.0.