IKHUORIAH ABUBAKAR MICHAEL

On my independent GRC analyst project, I document and maintain risk registers using ISO 27001 and NIST RMF methodologies. I also support risk analysis by identifying threats, vulnerabilities, control gaps, and remediation priorities.

I support compliance monitoring, control testing, evidence collection, and audit coordination to improve compliance readiness. My work includes mapping controls and assessing gaps against ISO 27001, NIST CSF, NIST RMF, and NIST SP 800-53.

I draft and review cybersecurity policies, procedures, standards, and guidelines, and support policy lifecycle management. I also assist with System Security Plans, control matrices, and Plans of Action and Milestones as part of RMF implementation and Assessment & Authorization activities.

I support third-party risk reviews, business continuity and disaster recovery planning, and incident governance. I’m available for contract, freelance, and full remote opportunities.