Open to opportunities

Imeh Etuk

@imehetuk

Message

Information security and AI governance professional building compliant GRC programs, audits, and risk controls.

Sweden

Message

What I'm looking for

I’m looking to support organizations delivering compliant, transparent, and ethical AI and security operations—owning GRC and audit readiness, running AI/cyber risk assessments, and translating regulations into practical controls that reduce organizational risk.

I’m an Information Security and AI Governance professional with 5+ years of hands-on experience implementing GRC frameworks, conducting AI and cybersecurity risk assessments, and driving compliance with ISO 27001, ISO 42001, the EU AI Act, GDPR, and SOC 2. I develop policies, maintain risk registers, and coordinate ISMS and AI governance programs across cross-functional teams—translating complex regulatory requirements into actionable controls.

In my recent work as an Information Security & AI Auditor, I assess AI governance frameworks against ISO 42001 and EU AI Act requirements, identify gaps, and advise on remediation priorities. I also produce audit reports and compliance documentation mapped to controls and obligations, and I’ve led ISMS audit readiness that contributed to achieving a first ISO 27001 certification. Previously, I redesigned vendor risk management to reduce review turnaround time by 30% and built security awareness and data privacy training that increased measured employee awareness scores by 40%.

Experience

Work history, roles, and key accomplishments

Current

Information Security & AI Auditor

Current

International Certification Body LLC

Jan 2026 - Present (6 months)

Assesses AI governance frameworks against ISO 42001 and EU AI Act requirements, identifying gaps and advising remediation priorities. Produces audit reports and runs AI and cybersecurity risk assessments aligned to EU AI Act obligations.

ISO 42001 AI Risk Assessment Cybersecurity Assessments Audit Readiness Audit Reporting remediation

Data Policy & Security Analyst

Brickanta AI

Sep 2025 - Jan 2026 (4 months)

Developed AI governance documentation and policy frameworks aligned to ISO 42001 and translated GDPR and AI regulatory requirements into internal policies. Coordinated ISMS and AI governance activities supporting ISO 27001 certification and supported internal audits.

AI Governance ISO 42001 GDPR Compliance ISO 27001 Gap Analysis Internal Audit

Information Security Analyst

Integrated Solutions Complete IT

Jan 2023 - Aug 2025 (2 years 7 months)

Coordinated cybersecurity initiatives across IT, business units, and external vendors, supporting risk mitigation and information security risk assessments. Managed third-party risk reviews and supported compliance programs across ISO 27001, GDPR, and SOC 2.

Information Security & Risk Management Risk Assessment Vendor Risk Management Compliance Support ISO 27001 GDPR SOC Policy Development Audit Preparation

IAM Business Analyst

Tiege Consult

Jan 2021 - Dec 2022 (1 year 11 months)

Gathered and translated business and security requirements into IAM policies, role definitions, and access control standards. Designed and delivered security awareness and data privacy training programmes and supported identity and access management initiatives.

Identity and Access Management (IAM)Access Control Security And Privacy Requirements Role Security Awareness Training Privacy Training