Ebuka O.

Overview: Achieving enterprise-grade security and compliance shouldn't paralyse your business operations. I am an Information Security and GRC Expert specialising in designing, implementing and managing Information Security Management Systems (ISMS) for agile organisations. I bridge the gap between complex regulatory requirements and practical, sustainable business operations; translating dense technical standards into plain English for stakeholders and non-technical teams. Whether you are aiming for your first ISO 27001 certification or need to overhaul your risk management framework, I provide strategic leadership and hands-on execution. Core Competencies & Services: End-to-end design, implementation, and continuous improvement of your ISMS, BCMS, AIMS, and associated Annex A controls. Upgrading legacy ISO 27001/27002:2013 frameworks to the latest 2022 standard with minimal operational friction. Implementing robust GRC processes to continuously monitor security controls, track exceptions, and automate compliance testing. Evaluating enterprise risks and defining targeted security standards, procedures, and controls to neutralise them. Documenting control failures, providing actionable remediation guidance, and generating executive dashboards to track the effectiveness of your security initiatives. Defining, enforcing, and maintaining comprehensive security policies tailored to align with both statutory requirements and your specific organisational objectives. Industry Certifications: CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CISA (Certified Information Systems Auditor) ISO 27001 Lead Auditor & Lead Implementer ISO 42001 Lead Auditor AWS Certified Security – Specialty WS Certified Solutions Architect - Associate Why Work With Me? Having worked extensively with small-to-medium and agile operations, I understand the unique dynamics of scaling teams. I do not rely on heavy, bureaucratic templates. Instead, I build lean, maintainable security frameworks that protect your critical assets while allowing your development and operations teams to maintain their velocity. If you are ready to strengthen your security posture and navigate your next audit with confidence, send me a message to discuss your project requirements.