Looking for a job

Henry Akwarandu

@henryakwarandu

Information security analyst at TD Bank who develops control tests and coordinates remediation for financial-sector regulatory requirements.

Canada

Message

At TD Bank, I develop test scripts, evaluate control design and effectiveness, and coordinate remediation for financial-sector regulatory requirements. I also manage ServiceNow GRC workflows for assessments, attestations, and issue tracking.

At Aptar Group, I led ISO 27001 and SOC 2 readiness assessments and built an RSA Archer dashboard for risk reporting. I used Tableau and Excel to score, prioritize, and track supplier risks.

At Verint International, I developed a third-party risk assessment program that improved vendor compliance by 20%. Earlier, at Tucows, I automated compliance monitoring, reducing manual reporting effort by 40%.

Experience

Work history, roles, and key accomplishments

Information Security Analyst

TD Bank

Jan 2025 - Oct 2026 (1 year 9 months)

Lead compliance assessments for GLBA, SWIFT CSCF, NYDFS 23 NYCRR 500, and Payments Canada requirements. Develop test scripts, gather evidence, and document results for cybersecurity, privacy, and operational controls.

ServiceNow GRC GLBA SWIFT CSCF NYDFS 23 NYCRR 500 Payments Canada IAM MFA Encryption Logging Vendor Oversight Incident Response Risk Assessment Compliance Audit Support

IT Security Risk Analyst

Aptar Group

Mar 2022 - Sep 2024 (2 years 6 months)

Led ISO 27001 and SOC 2 readiness assessments, mapped enterprise controls to ISO 27001 Annex A and SOC 2 Trust Services Criteria, and drove remediation plans. Executed audit activities from scoping through evidence collection and walkthroughs.

ISO 27001 SOC2 Risk Assessment Gap Analysis RSA Archer Tableau Excel Audit Control Testing Vendor Risk Management

IT Security Compliance Analyst

Verint International

Oct 2019 - Feb 2022 (2 years 4 months)

Performed information security risk assessments covering issue identification, triage, treatment planning, and remediation tracking against SOX, PCI DSS, ISO 27000-series, SOC 2, and GDPR requirements. Developed a third-party risk assessment program that improved vendor compliance by 20%.

SOX PCI DSS ISO 27001 SOC2 GDPR Risk Assessment RSA Archer Tableau Third Party Risk Management

GRC Analyst

Tucows

Jul 2016 - Sep 2019 (3 years 2 months)

Developed and implemented a risk assessment framework to improve risk identification and mitigation, reducing potential compliance breaches by 30%. Automated compliance monitoring, reducing manual reporting effort by 40%.

Risk Assessment Compliance Monitoring Tableau Excel Training Policy Development