Hire the Best Community Policy(ies) Freelancers in Lagos, NG

I help organisations strengthen Governance, Risk, and Compliance (GRC) frameworks, conduct risk assessments, and achieve ISO 27001 compliance with practical, audit-ready solutions. With 9+ years of experience in the financial sector, I support businesses in identifying compliance gaps, improving internal controls, and building resilient, secure operations. My approach ensures that risk management and compliance are not just documented, but fully integrated into business processes. Main Services • GRC Framework Implementation (Governance, Risk & Compliance) • Risk Assessment and Risk Register Development • ISO 27001 Gap Analysis and Audit Readiness • Information Security and Compliance Consulting • Vendor / Third-Party Risk Management • Policy and Procedure Development (Security, Compliance, Risk) Why Clients Choose Me • Experience in highly regulated financial environments • Strong expertise in risk management, compliance, and security governance • Ability to translate complex regulations into clear, actionable processes • Focus on audit readiness, operational resilience, and measurable results I am currently advancing my expertise through ISO 27001 certification training and an Executive MBA, combining technical depth with strategic business insight. If you need a GRC consultant, ISO 27001 specialist, or risk management expert who can deliver structured, effective, and business-aligned solutions, I’m ready to support you. Let’s build a secure, compliant, and resilient organisation.

Are you preparing for ISO 27001 certification, struggling with GDPR compliance, or looking to strengthen your organization’s risk and compliance program? I help businesses design, implement, and manage effective Governance, Risk, and Compliance (GRC) frameworks that satisfy regulators, auditors, and stakeholders. With proven experience in the financial services sector, I’ve successfully: Conducted risk assessments and built comprehensive risk registers. Designed and implemented ISMS documentation aligned with ISO 27001. Led internal audits and coordinated with cross-department teams to close compliance gaps. Developed policies covering Information Classification, Incident Management, Access Control, Clear Desk/Clear Screen, Threat Intelligence, and more. Ensured GDPR compliance by creating data protection processes and training staff. 💡 What I can do for you: ISO 27001 & GDPR compliance gap assessments Policy & procedure development (ISMS, vendor risk, access management, incident response) Risk assessment frameworks and templates Audit readiness support (internal/external) Vulnerability management Ongoing GRC advisory and reporting ✅ My approach is practical, clear, and business-oriented ,not just paperwork. I’ll help you build compliance systems that actually work for your business, not against it.

👨‍💻 Professional Summary I am a dedicated Information Security professional with a proven track record in safeguarding digital assets and ensuring the confidentiality, integrity, and availability (CIA) of sensitive information. With a deep understanding of cybersecurity principles, risk management, and compliance frameworks, I am adept at implementing robust security measures to protect against evolving threats. My expertise spans network security, application security, and data protection, backed by hands-on experience across security operations, engineering, and governance. I excel at collaborating with cross-functional teams, translating complex security concepts into business language, and fostering a culture of awareness and resilience. =================== 🔐 Core Expertise ⚙️ Security Operations & SIEM 🛡️ 2+ years configuring, administering, and deploying SIEM solutions (ArcSight, Splunk, Wazuh, IBM QRadar, Rapid7, Microsoft Sentinel, AlienVault). 🔔 Skilled in creating/tuning alarm rules, developing use cases, integrating log sources, and enhancing detection maturity. 👁️ Proficient in SIEM monitoring, engineering, and identifying Indicators of Compromise (IoCs). =================== 🚨 Threat Detection & Response 🔍 Experienced in incident analysis, forensic investigation, malware analysis, and report writing. ✍🏽 Skilled in log parsing with regex and producing actionable intelligence. 🎯 Strong background in incident handling and proactive threat hunting across enterprise environments. =================== 💻 Endpoint & Cloud Security 🖥️ Skilled with EDR solutions: MDE, Carbon Black, SentinelOne, CrowdStrike Falcon. ☁️ Secured hybrid infrastructures and cloud platforms (AWS & Azure). =================== 🛠️ Security Engineering 🏗️ Strong background in system hardening with CIS Benchmarks & ISO/IEC 27001 controls. 🤖 Experienced in automation of vulnerability remediation, compliance validation, and log enrichment. ⚡ Skilled in deploying/fine-tuning security tools and scripting for monitoring & response. =================== 📑 Governance & Awareness 📝 Developed framework documentation, policies, and procedures. 🎓 Conducted cybersecurity awareness training to build organizational resilience. =================== 🕵🏽 Vulnerability Management & Penetration Testing 🔦 Conducted assessments & exploitation simulations across web, mobile, cloud, networks, APIs, IoT, and wireless infrastructures. 🧑🏽‍💻 Strong foundation in Ethical Hacking using Nessus, Burp Suite, Nmap, Wireshark. =================== 🧾 Forensics & Cyber Investigations 🧩 Digital Forensics: Evidence extraction and analysis for investigations. 🚑 Incident Response: Rapid containment and attack vector identification. =================== 🌐 Network & System Analysis: Detection of unauthorized access and vulnerabilities. =================== 🦠 Malware Analysis: Deep research into code behavior and impact assessment. =================== 🧑🏽‍💻 Additional Technical Skills 🐧 Linux / Windows Administration 📡 Packet Analysis (Wireshark, Packet Tracer) In addition to technical proficiency, I excel in collaborating with cross-functional teams, communicating complex security concepts to non-technical stakeholders, and developing comprehensive security awareness programs. My goal is to create a resilient and secure digital environment by implementing best practices, fostering a culture of security awareness, and adapting to the ever-changing threat landscape.