Open to opportunities

benedict afful

@benedictafful

Message

Information Security Manager driving ISO 27001 compliance and robust cybersecurity programs.

Ghana

Message

What I'm looking for

I seek a cybersecurity leadership role where I can drive ISO 27001 implementation, strengthen security posture, mentor teams, and work cross-functionally in a compliance-focused, growth-oriented environment.

I am an Information Security Manager who builds and operationalizes ISMS aligned to ISO/IEC 27001 to protect data, systems and infrastructure. I lead risk assessments, vulnerability management, incident response, and security governance across financial institutions.

I have successfully led organisations to achieve ISO 27001:2022 certification and worked closely with executive leadership, IT, compliance, and operations to improve cybersecurity posture and regulatory compliance.

My hands-on technical experience includes vulnerability scanning and penetration testing with tools such as Metasploit, Nmap, Rapid7, Nessus and Kali Linux, as well as network and systems administration, firewalls, and endpoint protection.

I hold multiple certifications including ISO/IEC Lead Implementer and Lead Auditor, (ISC) Certified in Cybersecurity, CEH, CompTIA Security+ and CySA+, and I am completing an MSc in Cyber Security and Digital Forensics to deepen my technical and forensic capabilities.

Experience

Work history, roles, and key accomplishments

Current

Information Security Manager

Current

Adehyeman Savings and Loans

Jan 2025 - Present (11 months)

Developed and maintained the ISMS aligned to ISO/IEC 27001:2022 and led the organisation to achieve ISO 27001:2022 certification, strengthening compliance and customer trust while improving incident response and risk remediation.

ISO 27001 ISMS Risk Assessment Incident Response Vulnerability Management Rapid7 Nmap

Cyber and Information Security Officer

Pan African Savings and Loans

Jan 2024 - Jan 2025 (1 year)

Advised senior management and board on cyber security, developed cyber security policy and risk methodology, and supported internal/external audits to ensure Bank of Ghana regulatory compliance and improved security posture.

Security Governance Rapid7 Nessus Risk Management Security Policy

Network and Systems Support Officer

Pan African Savings and Loans

Dec 2021 - Dec 2023 (2 years)

Managed network devices and server infrastructure, performed security assessments and penetration testing, and applied patches and configurations to ensure availability and mitigate vulnerabilities across systems.

Network Device Configuration Firewalls Windows Server Linux Active Directory Penetration Testing Patch Management Troubleshooting

IT Helpdesk Assistant

Ecobank Ghana Limited

Oct 2020 - Aug 2021 (10 months)

Provided national service Level 1 support, opened and tracked service tickets, resolved common software and hardware issues, and configured new employee workstations to ensure minimal downtime.

Ticketing Troubleshooting User Support Documentation

IT Helpdesk Assistant

Ecobank Ghana Limited

May 2018 - Aug 2018 (3 months)

Provided Level 1 technical support, documented and managed service tickets, and configured workstations and peripherals to ensure timely resolution of user issues and maintain operational continuity.

Ticketing Troubleshooting Workstation Configuration Customer Support Documentation Peripheral Setup

Education

Degrees, certifications, and relevant coursework

Ghana Institute of Management and Public Administration

Master of Science, Cyber Security and Digital Forensics

Master of Science in Cyber Security and Digital Forensics program, focusing on advanced cybersecurity, digital forensics, and related investigative techniques.