Looking for a job

kris fumnanya

@krisfumnanya

Message

Cybersecurity GRC analyst at Amdari who raised client ISMS compliance maturity from 55% to 95%.

Canada

Message

At Amdari, I led ISO/IEC 27001:2022 gap assessments and control reviews that improved client ISMS compliance maturity from 55% to 95%. I translated findings into risk registers, Statements of Applicability, and prioritized remediation roadmaps.

At Riverview Manor Health Care Group, I assessed security risks across healthcare applications and infrastructure, maintained HIPAA and PIPEDA compliance documentation, and reviewed IAM and privileged access. These efforts increased remediation completion from 30% to 50%.

At 10Alytics Inc, I worked on threat detection, security configurations, vulnerability assessments, and compliance strategies. Earlier, at IC Global Bank, I conducted information security risk assessments and IT General Controls reviews, improving overall control compliance from 40% to 60%.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Specialist

Current

10Alytics Inc

Nov 2025 - Present (11 months)

Utilized SIEM tools for log and network traffic analysis, enhancing threat detection and reducing false positives by 25%. Designed and deployed security configurations for firewalls, IDS/IPS, and antivirus solutions, blocking 98% of unauthorized access attempts.

SIEM Wireshark Tcpdump Firewalls IDS IPS Antivirus Risk Management Phishing Malware Ransomware Sandbox AnyRun Cuckoo MITRE ATT&CK Virus Total Nmap Nessus Hydra Medusa John Metasploit ISO 27002 Virtualization

Current

GRC Consultant

Current

Amdari

Jan 2025 - Present (1 year 9 months)

Led ISO/IEC 27001:2022 gap assessments, application security reviews, and control effectiveness reviews, improving client ISMS compliance maturity from 55% to 95%. Built and maintained gap registers, risk registers, and remediation roadmaps.

ISO 27001 NIST CSF PCI DSS GDPR Risk Assessment Control Testing Gap Analysis Vendor Risk Management Stakeholder Management Policy Development Executive Reporting

GRC Analyst / Cybersecurity Risk Consultant

Riverview Manor Health Care Group

Jun 2023 - Dec 2024 (1 year 6 months)

Conducted security risk and controls assessments across healthcare applications, infrastructure, and endpoints, identifying risks and recommending remediation strategies. Maintained risk registers and tracked remediation activities to support HIPAA and PIPEDA compliance.

Risk Assessment HIPAA PIPEDA Vulnerability Management IAM Privileged Access Vendor Risk Management BCDR Policy Development Security Awareness

Cybersecurity Risk Analyst / GRC Analyst

IC Global Bank

Jan 2019 - Dec 2022 (3 years 11 months)

Managed cybersecurity governance and risk activities in a regulated financial services environment, conducting information security risk assessments across banking applications and infrastructure. Performed IT General Controls reviews and built enterprise risk registers.