agyekum User

Supported internal controls reviews and SOX/ITGC/PCI compliance, leading remediation of findings and improving control evidence and testing processes across cyber governance programs. Coordinated cross-functional stakeholders and contributed to HITRUST and NIST-aligned security testing, reducing compliance gaps.

Performed third-party risk assessments, vendor evidence analysis (SOC, pen tests, vulnerability scans) and lifecycle TPRM activities, producing risk treatment plans and automating assessments to reduce vendor control gaps. Escalated and managed remediation to ensure contractual and regulatory compliance.

Developed IT security procedures and conducted risk assessments and audits for internal systems and cloud solutions (AWS, Azure), improving controls and aligning operations with NIST, HIPAA, PCI and SOX requirements. Provided remediation recommendations and represented security on cross-functional projects.

Performed ITGC and application controls testing (FISCAM, NIST 800-53), supported SOX and SOC audits, and developed corrective action plans to strengthen access and change management controls. Reported findings and recommendations to leadership to improve IT control effectiveness.

Completed undergraduate studies at Kwame Nkrumah University of Science and Technology with focus on technical and/or scientific coursework supporting a career in information security and governance.