M Otuma

At Tata Consultancy Services, I support clients to identify, assess, manage, and remediate information security risks across technology platforms, applications, business processes, projects, and suppliers.

I conduct compliance assessments against ISO 27001, Cyber Essentials, and corporate security requirements, and provide security assurance throughout the IT project lifecycle. I work with risk owners to apply practical treatment strategies, from mitigation and remediation to acceptance, transfer, or avoidance.

Previously at Carzam, I supported information security governance, risk management, supplier assurance, internal audit, access control reviews, and security control activities. I maintained risk registers, conducted vendor due diligence, and coordinated remediation with stakeholders.

I've built practical capability in OneTrust GRC and Third-Party Risk Management, including supplier assurance and process automation. My work is grounded in ISO 27001, PCI DSS, NIST Cybersecurity Framework, SOC 2, GDPR, and Data Protection Act requirements.