Open to opportunities

Yusuf Abdulraheem

@yusufabdulraheem

Message

Senior information security and GRC consultant driving compliance, risk reduction, and incident preparedness.

Cayman Islands

Message

What I'm looking for

I seek a senior GRC or information security role in a regulated environment where I can lead compliance, risk reduction, incident response, and mentor teams.

I am a senior information security specialist with over ten years' experience designing, implementing, and managing governance, risk and compliance (GRC) programs across regulated environments. I have led initiatives aligned to ISO 27001, NIST CSF and GDPR, driving audit readiness, vendor risk management, incident response and business continuity improvements.

As a principal consultant and former senior information security officer, I advise executives and boards on governance and cyber risk, mentor junior staff, and deliver measurable outcomes—including substantial GDPR compliance gains, reductions in security incidents, and faster detection and response times.

Experience

Work history, roles, and key accomplishments

Current

Principal GRC Consultant

Current

Kinetix Automation Limited

Jan 2024 - Present (2 years)

Led design and deployment of enterprise GRC frameworks, improving audit readiness and compliance maturity across regulated environments and advising executives and boards on cyber risk and regulatory exposure.

GRC NIST CSF GDPR Risk Assessment Incident Response Vendor Risk Management

Senior Information Security Officer

Kinetix Automation Ltd.

Jan 2017 - Jan 2024 (7 years)

Designed and maintained security policies and controls to achieve ~90% GDPR compliance, led internal audits and incident response, and ran security awareness programs that reduced human-related incidents by 30%.

GDPR NIST CSF Incident Response Security Awareness Compliance Testing Vulnerability Management Internal Audit

Information Security Officer

Kinetix Automation Ltd

Jan 2015 - Jan 2017 (2 years)

Led a team of five to implement security policies and vulnerability/incident programs, cutting MTTD/MTTR by 20% and reducing social engineering risk by 35% via training initiatives.

Security Policy Team Leadership Vulnerability Management Incident Response

Team Lead – Enterprise Network

Resourcery PLC

Jan 2010 - Jan 2015 (5 years)

Led enterprise network infrastructure operations, performed penetration tests and security assessments, and managed SIEM, firewalls and IDS/IPS to secure corporate networks and outsourced services.

Network Security Penetration Testing SIEM Firewalls IPS Infrastructure Management

Education

Degrees, certifications, and relevant coursework

University of Roehampton

Postgraduate Diploma, Business Administration

Completed a Postgraduate Diploma in Business Administration, focusing on management and administration topics to support progression into senior governance and security roles.

University of Jos

Higher National Diploma, Geology & Mining

Obtained a Higher National Diploma in Geology & Mining with foundational technical knowledge relevant to resource and infrastructure risk assessments.