Open to opportunities

Stella Naah

@stellanaah

Message

Cybersecurity Analyst with over 6 years of experience in risk management.

United States

Message

What I'm looking for

I am looking for a role that fosters growth, collaboration, and innovation in cybersecurity.

I am a dedicated Cybersecurity Analyst with over six years of progressive experience in securing enterprise systems and managing risk across highly regulated industries, including fintech and healthcare. My expertise lies in SOC operations, GRC governance, and vulnerability management, where I have consistently demonstrated a proven track record of success. I am well-versed in frameworks such as NIST 800-53, HIPAA, SOC 2, and ISO 27001, which has enabled me to effectively contribute to organizations' security postures.

Throughout my career, I have honed my skills in cloud security, identity governance, and threat detection. My current role at SoFi involves monitoring real-time security events, conducting initial triage of incidents, and leading vulnerability remediation efforts. I take pride in generating insightful threat intel reports and enforcing data loss prevention policies, which have significantly improved our incident response capabilities. My analytical thinking and attention to detail have been instrumental in ensuring compliance and audit readiness across various projects.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Analyst (SOC/GRC)

Current

SoFi

Apr 2023 - Present (2 years 3 months)

Monitored real-time security events using Splunk and Microsoft Sentinel, analyzing logs and alerts across hybrid infrastructure to detect anomalies and potential threats. Conducted initial triage and escalation of security incidents involving malware, unauthorized access, and phishing attempts, reducing mean time to respond (MTTR).

Splunk NIST 800 53 Jira Incident Response Threat Intelligence

Risk and Compliance Analyst

Ally Financial

Jan 2021 - Present (4 years 6 months)

Led security risk assessments across internal systems and third-party vendors, identifying gaps and recommending controls to mitigate risk exposure. Evaluated compliance with industry regulations including GLBA, HIPAA, and SOC 2, and ensured timely remediation of audit findings.

Risk Assessment GLBA HIPAA)SOC GRC Azure Active Directory ServiceNow

Security Operations Analyst

GoHealth

Nov 2018 - Present (6 years 8 months)

Operated as a Tier 2 analyst in a 24/7 SOC environment, responsible for detection, analysis, containment, and mitigation of security incidents. Investigated alerts from CrowdStrike Falcon, Defender ATP, and Office 365 ATP, documenting findings and escalating critical threats.