Open to opportunities

Edwin Fokobo

@edwinfokobo

Message

Detail-oriented Information Security Analyst with 3+ years of experience.

United States

Message

What I'm looking for

I am seeking a role that offers growth opportunities in cybersecurity and GRC, where I can leverage my skills to enhance security measures and compliance efforts.

I am a detail-oriented Information Security Analyst with over three years of experience in Governance, Risk, and Compliance (GRC). My expertise lies in supporting enterprise-wide security programs, conducting risk assessments, and ensuring compliance with regulatory requirements. I have a strong knowledge of industry frameworks including NIST 800-53, HIPAA, ISO 27001, and CIS Controls.

Throughout my career, I have successfully conducted internal risk assessments, managed user access reviews, and developed security policies that align with organizational goals. My role at Blue Cross Blue Shield involved building a comprehensive security documentation library and assisting with SOC 2 audit readiness, which significantly improved audit preparedness and reduced risk exposure. I am currently pursuing a Master of Science in Cybersecurity to further enhance my skills and knowledge in this ever-evolving field.

Experience

Work history, roles, and key accomplishments

Information Security Analyst

Blue Cross Blue Shield

Jan 2023 - Present (2 years 6 months)

Conducted regular internal risk assessments and supported third-party security reviews aligned with NIST and CIS Controls. Managed user access reviews for multiple departments, ensuring least privilege and enforcing RBAC standards.

NIST CIS Risk Assessment RBAC Security Awareness

Information Security Analyst – GRC Compliance

Sanford Health

Jan 2022 - Present (3 years 6 months)

Supported GRC initiatives by aligning information security practices with HIPAA, NIST CSF, and CIS controls. Conducted user access control reviews and enforced encryption policies on endpoints to protect PHI/ePHI.