Open to opportunities

STEPHANE ESSOMBA

@stephaneessomba

Senior IT audit and cybersecurity governance consultant, delivering PCI-DSS/SOC 2 compliance and risk-based control improvements.

Canada

Message

What I'm looking for

I’m looking to lead IT audit and cybersecurity governance engagements end-to-end—driving PCI-DSS/SOC 2-style compliance, risk-based control improvements, and executive-ready reporting in highly regulated environments.

I’m a Cybersecurity, risk, and compliance leader with over 20 years of experience in IT audit, technology risk management, regulatory compliance, and information security in highly regulated environments. I lead PCI-DSS, SOC 2 Type 2, and Interac assessments, advising executive stakeholders and improving governance, control effectiveness, and organizational resilience.

What sets me apart is how I translate complex technical and compliance findings into practical, risk-based recommendations—so teams can prioritize remediation and raise security maturity. I also build and strengthen security capabilities across control design and security architecture, SIEM monitoring (ArcSight ESM, Splunk), and vulnerability management/penetration testing, while tracking findings through closure. With CISSP, CISA, and PCI-DSS QSA credentials, I’m committed to clear, actionable reporting and stakeholder-ready advisory that supports strategic decision-making.

Experience

Work history, roles, and key accomplishments

Current

Sr Information Security Consultant

Current

UBITRAK

Jun 2017 - Present (9 years 1 month)

Leads IT audit and PCI-DSS qualified security assessor (QSA) engagements, assessing governance, control design, and operational effectiveness. Delivers structured compliance reporting and performs risk/vulnerability assessments aligned with PCI-DSS, CIS, and NIST, supporting remediation and security posture improvement.

IT Audit PCI DSS Interac CIS NIST Governance and Compliance Risk Assessment Vulnerability Assessment Security scanning remediation Security Architecture Stakeholder Management

Cloud Security Expert

Fortica Cybersecurity

Aug 2021 - Feb 2022 (6 months)

Developed cloud security architecture and supported implementation of cloud security controls across Azure, Office 365, and AWS environments. Authored cloud security governance policies and advised teams on risk, threats, remediation planning, and secure cloud usage.

Cloud Security Architecture Azure Office 365 AWS Cloud Security Security Governance Policy Development Risk Assessment Threat Assessment remediation Security Best Practices

Sr Information Security Consultant

Gryphons Consulting Inc

Aug 2015 - Jun 2017 (1 year 10 months)

Designed and deployed security architectures and SIEM solutions using ArcSight and Splunk to improve monitoring, traceability, and audit evidence generation. Coordinated penetration testing, vulnerability management, and risk assessments, and developed SIEM operational processes for detection, analysis, response, and governance.

ArcSight Splunk SIEM Security Architecture Penetration Testing Vulnerability Management Risk Assessment Security Audits Incident Management Security Assessments Detection And Response Governance

Information Security Analyst

CGI Inc

May 2010 - Jul 2015 (5 years 2 months)

Supported senior management in designing and implementing information security policies, standards, and procedures aligned with regulatory and governance requirements. Oversaw SIEM processes and conducted security event analysis, incident coordination, and penetration testing, including Tripwire/nCircle CCM integrity monitoring and vulnerability tracking.

Security Policies Policies and Procedures SIEM Incident Coordination Impact Analysis Penetration Testing Security Assessments Tripwire NCircle CCM Integrity Monitoring

IT Analyst Consultant

IBM Canada

Nov 2008 - May 2010 (1 year 6 months)

Provided real-time monitoring and analysis of incidents affecting technical infrastructure and critical software systems. Monitored HPE NonStop servers using HP WebViewPoint and supported troubleshooting for banking processes in Tandem environments, including link/node diagnostics using TACL and system management in complex multi-vendor environments.

HPE NonStop Tandem Banking Processes Troubleshooting TACL System Management