# Ewura Ama Amponsah

Ewura Ama Amponsah is a remote worker on Himalayas, CISO / Security Lead at The Digicoast, based in Canada.

Source: https://himalayas.app/@ewuraamaamponsah

```text
I lead GRC, cloud, and application security programs from risk to certification.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | Canada |
| Authorized to work in | Canada, Ghana |
| Salary expectations | 70k+ CAD |
| Job categories | GRC Analyst, Security Lead, Governance Risk and Compliance Lead, Cybersecurity Analyst, Security Analyst, Cybersecurity Engineer, Application Security Engineer, Security Engineer, Security Architect, DevSecOps Engineer |
| Skills | Cybersecurity, Governance Risk And Compliance, ISO 27001, SOC2 Compliance, Risk Management, Security Auditing, ISMS Implementation, Security Awareness, Audit Readiness, Policy Implementation, Incident Response, Vulnerability Management, Vulnerability Assessment, Penetration Testing, Burp suite, Metasploit, Audit Remediation Tracking, Application Security Testing, EC2, Docker, Jenkins, CI CD Pipelines, Secure SDLC, CI CD Security Gates, Infrastructure Security, Firewall Configuration, Microsoft Intune, Endpoint Compliance, Security Monitoring, Data Protection Controls, Secure Coding, Security Training, Security Assessment Reporting, Project Management, AWS, Microsoft Office, Stakeholder Management, CI CD, English, Vulnerability Scanning, Vulnerability Remediation, Vulnerability Analysis, Vulnerability Testing, Vulnerability Scanning Solutions, Vulnerability Discovery, Risk Mitigation, Risk Analysis, Risk Management Framework, Risk Register, Risk And Compliance, Risk Assessment, Security Architecture, Security Compliance, Security Assessments, Audit Management, Audit Preparation, Audit Reporting, Audit Planning, Audit and Compliance |

## What I'm looking for

```text
I'm looking to lead practical security, GRC, and secure software delivery work where I can translate technical risk into clear business actions, strengthen audit readiness, and mentor security teams.
```

## About

```text
Cybersecurity and GRC lead with 3+ years securing software and enterprise environments across ISO 27001:2022, SOC 2 readiness, vulnerability management, DevOps security, and cloud security. Currently CISO for a 30-person organization; helped achieve ISO 27001:2022 certification, led penetration testing and audits, embedded security into the SDLC, and mentored analysts while translating technical risk into business-focused security actions.
```

## Experience

### CISO / Security Lead (current)

The Digicoast. Aug 2025 - Present

```text
Lead ISO 27001:2022-aligned ISMS implementation and certification readiness for a 30-person organization. Manage a 4-person security team and implemented security gates across CI/CD pipelines.
```

Skills: ISO-27001, ISMS-Implementation, Risk-Management, Security-Auditing, CI-CD, CI-CD-Security-Gates, Security-Awareness, Incident-Response

### Lead Cybersecurity Analyst

[AmaliTech](https://himalayas.app/companies/amlitech). Oct 2022 - Jun 2026

```text
Helped achieve ISO 27001:2022 certification by driving the ISMS migration and updating over 25 policies. Reduced repeat audit findings by 10% and shortened medium vulnerability remediation from 30 to 10 days.
```

Skills: ISO-27001, Vulnerability-Management, Penetration-Testing, Secure-SDLC, Jenkins, EC2, Docker, Microsoft-Intune, Endpoint-Compliance

## Education

### University of Calgary

Master of Information Security and Privacy, Information Security and Privacy

```text
Pursuing a Master of Information Security and Privacy with an expected graduation in August 2027.
```

### University of Calgary

Masters, Information Security and Privacy. 2026 - Present

### University of Mines and Technology

Bachelor of Science, Computer Science. 2018 - 2022. Grade: 3.1

Activities and societies: VP Events - Association of Computer Science students

## Tech stack

- AWS IAM
- GitHub
- Jenkins
- GitHub Actions
- Notion
- Git
- Docker
- NGINX
- Microsoft Intune
- Burp Suite
- Nmap
- Metasploit
- OWASP ZAP

To contact Ewura Ama, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Niyi User](https://himalayas.app/@niyiuser): Senior Compliance Specialist, Microsoft
- [Olu A](https://himalayas.app/@OluA): GRC Analyst, Skyview Global
- [shafiq ahmed](https://himalayas.app/@shafiqahmed1): Senior Security Analyst, DigitalPoint Technology
- [Aidan OByrne](https://himalayas.app/@aidanobyrne): Information Security Analyst, Fasken Martineau DuMoulin LLP
- [Barbara Osei](https://himalayas.app/@barbaraosei): Manager – Advisory, Innovare Limited
- [Vikas Chowdhary](https://himalayas.app/@vikaschowdhary): Senior Manager – ITSM, Scotiabank
- [Carlos Carvalho](https://himalayas.app/@decarvalhocarlos): Senior Information Security Analyst, BOX Technology
- [Ade User](https://himalayas.app/@adeuser2): Senior Security & Risk Analyst, Shopify
- [Clayton Smith](https://himalayas.app/@claytonsmith): Information Security Officer, Fidelity Bank Bahamas
- [Mayuri Chahande](https://himalayas.app/@mayurichahande): Senior IT GRC Analyst, Zema Global Data Corporation