Chuka Ochieze

I’m an aspiring Cyber Security GRC professional with a strong focus on cyber security risk management and audit-ready compliance. I’m ISO27001 Certified Lead Auditor and I actively build practical GRC capabilities through structured training and hands-on work.

In my ISO 27001 Lead Auditor training, I built a full ISMS from scratch—developing risk assessments, creating the Statement of Applicability, and drafting core security policies and procedures required for certification. I also conducted an end-to-end cyber security maturity assessment using the NIST CSF framework, and performed a third-party risk assessment on a supplier using a third-party security assessment questionnaire.

Beyond training, I bring a compliance mindset from my experience in regulated environments—ensuring practices align with government regulations, identifying areas out of compliance, and supporting colleagues through best-practice adoption. I’m especially interested in roles that strengthen governance, third-party risk, asset management (including CMDB design), and continuous improvement in control effectiveness.