Looking for a job

Aybayray 13

@aybayray13

Message

I build DORA, GRC, and operational-resilience frameworks for regulated organisations.

United Kingdom

Message

What I'm looking for

I'm looking to lead practical GRC, DORA, operational-resilience, or AI-governance work where I can turn regulatory requirements into effective controls, risk decisions, and measurable remediation.

I'm currently leading AI governance research at Ellipse Advisory Group, translating ISO/IEC 42001, the EU AI Act, and NIST AI RMF into practical controls, policies, risk assessments, and implementation recommendations.

At Bank of Valletta, I mapped DORA RTS obligations to controls, led a cross-functional gap assessment, and presented prioritised mitigation roadmaps to Board-level stakeholders. I also strengthened control testing, business continuity and disaster recovery planning, ITGC evidence, and critical-vendor risk reviews.

Previously at Ellipse Advisory Group, I built a greenfield GRC programme, implemented third-party risk onboarding in ServiceNow GRC, and supported cloud security monitoring across 1,000+ endpoints using Splunk, CrowdStrike, and AWS GuardDuty.

Experience

Work history, roles, and key accomplishments

Current

AI Governance Research Lead

Current

Ellipse Advisory Group

Jul 2026 - Present (2 months)

Lead multidisciplinary research into practical governance and risk-management methods for ISO/IEC 42001, the EU AI Act, and the NIST AI Risk Management Framework. Direct and quality-assure research outputs covering AI risk, model governance, data governance, and third-party AI risk.

ISO 42001 EU AI Act NIST AI RMF AI Governance Risk Management Data Governance Third Party Risk Transparency Accountability Human In The Loop Oversight Research Thought Leadership

Information Security Analyst

Bank of Valletta

Oct 2025 - Jun 2026 (8 months)

Standardised a library of more than 45 corporate policies and unified controls across ISO/IEC 27001, DORA, and GDPR requirements. Led a multi-department DORA gap-assessment exercise, mapping applicable RTS obligations to controls, owners, and remediation requirements.

ISO 27001 DORA GDPR Gap Analysis Control Testing Audit Readiness Business Continuity Disaster Recovery Business Impact Analysis (BIA)RTO RPO Targets Third Party Risk ITGC

Advisory Lead / GRC & Compliance Analyst

Ellipse Advisory Group

May 2021 - Oct 2025 (4 years 5 months)

Built and launched a greenfield GRC programme, including the control framework, risk-management cycle, internal-audit mechanisms, and policy library aligned with ISO/IEC 27001 and NIST CSF. Managed enterprise risk assessments, tracked remediation actions, and produced risk dashboards used by senior executives.

GRC ISO 27001 NIST CSF Risk Assessment ServiceNow GRC Third Party Risk AML CFT Chainalysis TRM Labs And Chainalysis (Reactor) KYT Tools Splunk Crowdstrike AWS AI Governance ISO 42001 EU AI Act NIST AI RMF

Systems Administrator (GRC & IT Controls Intern)

Ebedinma Ventures

Sep 2020 - Apr 2021 (7 months)

Administered access controls, configuration controls, encryption, patching, and endpoint-protection measures across more than 200 multi-platform devices. Conducted vulnerability assessments, documented technical findings, and coordinated remediation with engineering leads.

Access Control Configuration Management Encryption Patching Endpoint Protection Vulnerability Assessment Security Documentation Compliance

Education

Degrees, certifications, and relevant coursework

Coventry University

Master of Arts, Terrorism, International Crime and Global Security

MA in Terrorism, International Crime and Global Security with focus on financial crime methodologies, AML/CFT regulatory frameworks, global sanctions regimes, and organizational risk.