Jacinta Ogbonna

 ISO 27001 Audits: Conducted ISO 27001 audits for financial services clients, assessing all
mandatory clauses and the applicable Annex A controls and delivering findings that achieved 100%
stakeholder acceptance with zero disputes.
 Risk & Control Framework Mapping: Mapped 200+ controls across 13 frameworks using NIST
SP 800-53 rev 4/5 priority tiering, reducing control duplication by 35% and enabling repeatable
audit testing.
 Third-Party Risk Management (TPRM): Completed multiple vendor risk assessments via SAFE
TPRM, documenting control gaps across 20+ vendor ecosystems and strengthening supplier
security posture by 25%.
 Cyber Maturity Assessment using NIST CSF 2.0: Delivered NIST CSF 2.0 cybersecurity
maturity assessment for a Wealth Management client using CMMI scoring, producing a strategic
roadmap targeting 40% maturity improvement within 2 years.
 Policy Development & Governance Integration (M&A): Unified cybersecurity policies across
merging entities by reviewing 15+ documents, eliminating 45% of governance gaps, and aligning
frameworks to the parent entities standards.
 Incident Management Policy & Lifecycle Design: Built an incident management policy,
including incident report template and lessons learnt templates, remediating gaps identified from a
cyber maturity assessment, and reducing incident response coordination time by 30%.
 Cyber Threat Risk Assessment (IRAM2): Owned, executed, and delivered end-to-end risk
assessment using the Information Risk Assessment Methodology 2 (IRAM2), evaluating business
impacts, threat scenarios, vulnerabilities, and residual risks associated with technology solutions,
producing audit-ready working papers that earned client praise as more comprehensive than
anything seen before. Helped client make a risk-informed decision on solution adoption.

 SOC 2 Type II Audit Execution: Led control walkthroughs with 10+ stakeholders across
availability and confidentiality criteria, completing AICPA-aligned evidence processing with 100%
documentation completeness and accuracy.