Open to opportunities

Emmanuel Ndukwe

@emmanuelndukwe

Message

I build and mature ISO 27001 compliance programs, audits, and security governance.

Nigeria

Message

What I'm looking for

I'm looking to build and mature privacy-first security, risk, and compliance programs, partnering across technical and business teams to make audit-ready controls practical, scalable, and effective.

I've built and matured ISO 27001 ISMS programs at Guaranty Trust HoldCo Plc, from Statement of Applicability development and risk treatment planning to management review processes and internal audit ownership.

I currently lead SOC 2 Type 2 audit execution end-to-end, including scope, evidence, auditor walkthroughs, and remediation. I partner with Engineering, IT, Legal, Privacy, and HR to turn compliance requirements into practical workflows that scale across products and business units.

Previously, I created enterprise compliance processes for policy attestation, control testing, and evidence collection, and coordinated ISO 27001, 20000, and 23001 surveillance audits with zero major non-conformities.

My work spans security policy leadership, third-party risk, DPIAs, IAM governance, vulnerability assessments, and executive-ready compliance reporting. I'm passionate about the open internet and privacy-first security practices.

Experience

Work history, roles, and key accomplishments

Current

Information Risk Management Officer

Current

Guaranty Trust HoldCo Plc

Feb 2025 - Present (1 year 6 months)

Maintains and matures the enterprise ISMS in alignment with ISO 27001, leads SOC 2 Type 2 audit execution, and owns the internal audit function. Coordinates with Engineering, IT, Legal, Privacy, and HR teams to gather control evidence and drive compliance.

ISO 27001 SOC Risk Management Internal Audit Compliance Stakeholder Management Vulnerability Assessment

Head, Security Program & Key Management

Guaranty Trust HoldCo Plc

Sep 2024 - Feb 2025 (5 months)

Led the security policy program, built compliance processes from scratch, and coordinated ISO 27001, 20000, and 23001 surveillance audits. Enhanced change management processes and facilitated key management governance.

Security Policy Compliance ISO 27001 Change Management Key Management

Information Security Governance & Strategy

Guaranty Trust HoldCo Plc

Jul 2019 - Sep 2024 (5 years 2 months)

Designed and implemented the ISMS from the ground up, supported SOC 2 Type 2 readiness, and owned the internal audit program. Led a full policy program overhaul and assessed third-party security risks.

ISO 27001 NIST CSF SOC Internal Audit Policy Development Risk Assessment Privacy

Identity & Access Management Analyst

Guaranty Trust HoldCo Plc

Jul 2017 - Jul 2019 (2 years)

Managed user access lifecycle across enterprise applications, enforced least-privilege principles, and generated security access reports. Resolved access-related incidents within SLAs.

Access Control Incident Management Reporting