Open to opportunities

Chisom Alaneme

@chisomalaneme

Message

Information Security Specialist focused on SOC, GRC, and threat response.

Nigeria

Message

What I'm looking for

I seek a security role where I can lead SOC/GRC initiatives, improve detection and response, work cross-functionally, and grow toward greater responsibility in compliance and security operations.

I am an Information Security Specialist with hands-on experience in SOC operations, governance, risk and compliance (GRC), and incident response. I have implemented SIEM and SOAR use cases, led security awareness and phishing programs, conducted vendor risk assessments, and produced comprehensive security reports to align security operations with business objectives.

I have worked across banking and private sectors, contributing to 24/7 monitoring, threat hunting with NIDS, and compliance efforts including ISO 27001, PCI DSS, NDPA and GDPR. I emphasize collaboration with IT, HR and cross-functional teams to embed security best practices and drive measurable improvements in detection, response, and regulatory readiness.

Experience

Work history, roles, and key accomplishments

Current

Information Security Officer

Current

Lotus Bank

Apr 2024 - Present (1 year 6 months)

Designed and led a comprehensive information security awareness program and maintained policies, vendor assessments, and compliance frameworks (ISO 27001, NDPA, GDPR, PCI DSS) to strengthen GRC posture.

GRC Policy Development Vendor Assessment ISO 27001 PCI DSS Security Awareness Threat Intelligence Compliance Reporting

Security Operations Analyst

Shelt Global Ltd

Sep 2022 - Apr 2024 (1 year 7 months)

Monitored security events and led incident response and threat hunting activities, created SIEM use cases, and produced client-facing reports to improve detection and remediation.

SIEM Incident Response Threat Hunting Log Analysis

Information Security Analyst

FirstBank of Nigeria Ltd

Mar 2021 - Aug 2022 (1 year 5 months)

Operated 24/7 SOC monitoring using SIEM, SOAR, EDR and other tools, conducted incident analysis and email security initiatives, and prepared PCI DSS compliance reports for the bank.