Open to opportunities

Valerie Ejiofor

@valerieejiofor

Cybersecurity GRC analyst combining compliance assessments, third-party risk, and audit readiness to strengthen security posture.

United States

Message

What I'm looking for

I’m looking for a role where I can drive cybersecurity compliance and risk governance—perform control assessments, support audits and remediation, and partner with technical and business stakeholders to strengthen security posture.

I’m a Cybersecurity Governance, Risk, and Compliance (GRC) professional focused on cybersecurity compliance, risk assessments, third-party risk management, and audit readiness. I apply NIST, SOX, CMMC, ISO 27001, and SOC 2 frameworks to assess controls, manage remediation efforts, and support compliance initiatives.

In my current role as a Global Cybersecurity Compliance Analyst, I lead assessments and risk evaluations for customers and third parties, review and negotiate security-related contractual terms, and coordinate questionnaire, due diligence, and evidence requests. I also support federal compliance initiatives through NIST SP 800-171 and CMMC control assessments, and I track remediation for audit findings and control gaps.

Experience

Work history, roles, and key accomplishments

Current

Global Cybersecurity Compliance Analyst

Current

UL Solutions

Jun 2025 - Present (1 year 1 month)

Lead cybersecurity compliance assessments and risk evaluations for customers and third parties, including contractual security requirements. Support NIST SP 800-171 and CMMC control assessments, audits, evidence collection, remediation tracking, and governance documentation.

Cybersecurity Assessments Risk Assessment Third Party Risk Management Contractual Security Requirements Security Questionnaire Management NIST SP 800 171 Control Assessments remediation Audit Readiness Compliance Evidence Validation Cybersecurity Documentation

Information Security Analyst

University of Tampa

Aug 2023 - May 2025 (1 year 9 months)

Support enterprise risk assessments and security monitoring, including log analysis and incident response. Contribute to SOC 2 and ISO 27001 audit readiness through control identification, sample collection, and control testing (IT General Controls and security controls).

Security Monitoring Log Analysis Microsoft 365 Defender Okta ProofPoint SOC 2 Audits ISO 27001 Controls Testing IT General Controls Security Testing Security Awareness Training

Information Security Consultant

Deloitte

Nov 2020 - Jul 2023 (2 years 8 months)

Conduct business continuity exercises using Business Impact Analysis (BIA) and Disaster Recovery Plans (DRP) to improve organizational resilience. Perform data privacy audit activities, implement SWIFT analysis measures, validate IT control effectiveness, and support penetration testing and vulnerability assessments with actionable recommendations.