Hannah A.

As a certified ISO 27001:2022 Lead Implementor and Lead Auditor, I bring deep expertise in cybersecurity, risk management, and compliance frameworks. I am currently pursuing a dual MBA from IU International University in Hamburg, Germany, alongside holding a degree in IT Management from London South Bank University, which strengthens my ability to bridge the gap between technical strategy and business objectives. I specialize in risk assessments, leveraging a comprehensive knowledge of frameworks like MITRE ATT&CK, Zero Trust, STRIDE, DREAD, and FAIR. My work primarily focuses on financial institutions, performing vendor risk assessments, firewall configuration reviews, and network risk assessments. I also have extensive experience creating and managing risk registers, ensuring that risks are systematically identified, evaluated, and mitigated. In the realm of compliance, I guide organizations through the complexities of ISO 27001, 27701, PCI-DSS, SWIFT, GDPR, and NIST. My approach integrates technical rigor with strategic foresight, ensuring that cybersecurity, business continuity, and risk management align seamlessly with industry standards. Beyond risk assessments, I produce detailed compliance and threat modeling reports, craft tailored policies and procedures, and provide expert program management across cybersecurity, IT, and technology strategies. My ability to manage both high-level strategy and detailed execution sets me apart, offering organizations a holistic approach to cybersecurity and risk management.