Open to opportunities

Kyron Joseph

@kyronjoseph

Message

Cybersecurity and GRC professional with a focus on risk management.

Zimbabwe

Message

What I'm looking for

I am looking for a role that allows me to enhance security operations and drive compliance initiatives in a collaborative environment.

I am a dedicated cybersecurity and GRC professional with over four years of experience in managing cybersecurity risks and implementing compliance frameworks. My expertise lies in conducting thorough risk assessments, managing complex security incidents, and developing tailored policies that align with industry standards such as NIST, PCI-DSS, and ISO 27001. I am known for my strong analytical skills and hands-on technical expertise, which enable me to proactively minimize vulnerabilities and enhance system protection.

In my recent role as a Cyber Security Specialist at Evolve Security Academy, I successfully conducted penetration testing and vulnerability management, leading to a 35% reduction in identified security risks. I also led training initiatives that significantly improved the organization’s security awareness and incident response readiness. My commitment to maintaining compliance with industry standards has been demonstrated through comprehensive audits and the development of Information Security policies that align with business objectives.

As I seek to leverage my expertise in cybersecurity and GRC, I am eager to drive impactful results and strengthen security operations within a forward-thinking organization. My goal is to contribute to a culture of security excellence while continuously enhancing my skills and knowledge in this ever-evolving field.

Experience

Work history, roles, and key accomplishments

Cyber Security Specialist

Evolve Security Academy

Oct 2022 - Present (2 years 8 months)

Conducted penetration testing, cloud security assessments, and vulnerability management, resulting in a 35% reduction in identified security risks. Led training for 40% of staff on cybersecurity protocols, significantly enhancing the organization’s security awareness and improving incident response readiness. Researched and implemented new risk prevention practices to maintain compliance with NIST

Penetration Testing Vulnerability Management Cloud Security NIST ISO 27001 Incident Response Network Hardware Cisco

GRC Analyst

Ryze Marketing Agency

Feb 2022 - Present (3 years 4 months)

Analyzed cybersecurity risks using the NIST SP 300 methodology, identifying critical vulnerabilities and implementing controls that improved the agency’s security posture by 30%. Spearheaded access management and authentication policy improvements, increasing security measures for both staff and third-party vendors. Collaborated with management on Plans of Action and Milestones (POA&Ms) to address

Cyber Risk Management Access Management Authentication Policy Development GRC Compliance Reporting

I.T Auditor/ Risk Analyst

Infiniti/ Subaru AMSI

Oct 2021 - Present (3 years 8 months)

Conducted risk assessments to address outstanding audit findings, improving the organization’s cybersecurity health and reducing risk exposure by 25%. Developed cybersecurity awareness materials to educate staff on potential threats, leading to a 40% increase in phishing and incident reporting accuracy. Managed policy documentation and coordinated with external teams for NIST framework implementat

Risk Assessment Policy Documentation NIST Incident Reports

Education

Degrees, certifications, and relevant coursework

University of Texas at El Paso

Bachelor of Arts, Digital Media Production

Completed a Bachelor of Arts in Digital Media Production, gaining expertise in various aspects of digital content creation. Acquired practical skills in media production techniques and digital storytelling.

University of Texas at El Paso

Master of Arts, Communication

Pursued a Master of Arts in Communication, focusing on advanced theories and practices within the field. Developed strong analytical and research skills applicable to various communication contexts.