Open to opportunities

Mihertu Melkamu Andargie

@mihertumelkamuandarg

I build ISO 27001-aligned security governance and cyber risk programs.

At Gesellschaft für Internationale Zusammenarbeit, I led the end-to-end design and implementation of an ISO/IEC 27001:2022-aligned ISMS, achieving certification on schedule and improving audit readiness by 100%.

I established organization-wide risk assessment and treatment processes, operationalized incident management to reduce response time by 40%, and used KIM, ChatGPT, and Claude to strengthen policy development, cyber-risk scenarios, awareness materials, and incident analysis. I also presented ISMS implementation practices at the Global ISO Conference in Germany and contributed to an international KPI working group.

Previously at Zemen Bank, I led IT and cyber risk management across business units, reducing high-risk exposures by 35% and building more than 20 KRI dashboards for executive risk visibility.

My earlier work includes PCI DSS recertification and security monitoring at EthSwitch, plus private-cloud deployment using OpenStack at the Information Network Security Agency.

Experience

Work history, roles, and key accomplishments

Current

Information Security Management Specialist

Current

Gesellschaft für Internationale Zusammenarbeit

Dec 2023 - Present (2 years 8 months)

Led end-to-end design and implementation of an ISO/IEC 27001:2022-aligned ISMS, achieving certification on schedule and improving audit readiness by 100%. Established risk assessment and incident management processes, reducing incident response time by 40%.

ISO 27001 GRC Platforms ChatGpt Claude Incident Management IAM Active Directory Endpoint Protection VPN MFA Firewalls

Senior IT Risk Management Officer

Zemen Bank S.C.

Aug 2021 - Dec 2023 (2 years 4 months)

Led IT and cyber risk management across all business units, establishing a risk framework aligned with ISO/IEC 27001, COBIT, and NIST CSF, reducing high-risk exposures by 35%. Designed and operationalized 20+ KRI dashboards, improving decision-making speed by 30%.

ISO 27001 COBIT NIST Cybersecurity Framework

Information Technology Auditor

EthSwitch S.C.

Jun 2020 - Jul 2021 (1 year 1 month)

Supported PCI DSS recertification of the national payment platform, ensuring compliance with international payment security standards and zero critical audit findings. Performed vulnerability assessments using Nessus and SIEM-based monitoring, reducing recurring security findings by 20%.

PCI DSS Nessus Firewalls SIEM

Network & Security Engineer

Information Network Security Agency

Jan 2017 - May 2020 (3 years 4 months)

Contributed to the design and deployment of a private cloud using OpenStack, enabling secure, scalable internal cloud services and improving infrastructure availability by 30%.

Private Cloud KVM QEMU Network Security