Emmanuel Adansi
Governance, Risk & Compliance (GRC) and Security Compliance Analyst
Hire this person
Send a job offer directly to this candidate
About
Governance, Risk & Compliance (GRC) and Security Compliance Analyst with a strong background in the banking and financial services sector, including hands-on experience as a Credit Officer. Brings a unique combination of cybersecurity governance, regulatory compliance, risk management, internal controls, and financial risk experience, with a strong understanding of operating within highly regulated environments. Experienced in risk assessment and treatment, security and compliance control reviews, policy and procedure compliance, audit readiness, control gap analysis, risk documentation, remediation tracking, and regulatory compliance monitoring.
Adept at identifying risks, evaluating existing controls, documenting findings, and working with stakeholders to implement corrective actions that strengthen the organization's security and compliance posture. Leverages banking and credit experience in credit risk assessment, customer due diligence, financial documentation review, loan processing, record accuracy, confidentiality, policy adherence, and risk-based decision-making. Experienced in handling sensitive customer and financial information while maintaining high standards of data privacy, integrity, regulatory compliance, and professional ethics.
Possesses strong knowledge of information security governance, cybersecurity risk management, data protection, third-party risk, identity and access controls, incident management, and continuous compliance. Strong analytical, documentation, communication, and stakeholder-management capabilities, with the ability to bridge business, financial, risk, compliance, and information security requirements to support effective governance and organizational resilience.
Experience
GRC ANALYST at OTSI (OBJECT TECHNOLOGY SOLUTIONS, INC.) (2022-11 – Present)
Support Governance, Risk, and Compliance (GRC) activities by assessing technology, cybersecurity, operational, and regulatory risks across enterprise environments.
- Conduct IT and cybersecurity risk assessments to identify threats, vulnerabilities, control gaps, business impacts, and appropriate risk treatment strategies.
- Perform security control assessments and testing to evaluate the design, implementation, and operating effectiveness of controls.
- Support IT General Controls (ITGC) assessments across logical access, change management, IT operations, backup and recovery, and information security.
- Maintain and update risk registers, including risk descriptions, inherent and residual risk ratings, control mappings, risk owners, treatment plans, and remediation status.
- Conduct compliance and gap assessments against applicable cybersecurity frameworks, regulatory requirements, contractual obligations, and internal policies.
- Support compliance initiatives aligned with frameworks and standards such as NIST CSF, NIST RMF, ISO/IEC 27001, SOC 1/SOC 2, COBIT, SOX, and PCI DSS.
- Assist with SOC 2 and audit-readiness activities, including control walkthroughs, evidence collection, documentation reviews, testing support, and remediation tracking.
- Review identity and access management (IAM) controls, including user provisioning and deprovisioning, privileged access, role-based access, segregation of duties, and periodic access reviews.
- Support third-party/vendor risk management by conducting due diligence, reviewing security questionnaires, SOC reports, certifications, policies, and other vendor control evidence.
- Evaluate controls related to data security, privacy, encryption, information handling, retention, and access restrictions.
- Support vulnerability and patch management governance by reviewing identified vulnerabilities, assessing associated risk, and tracking remediation with technical teams.
- Assist with the development and maintenance of information security policies, standards, procedures, control matrices, and compliance documentation.
- Review change management processes to verify appropriate authorization, testing, approval, documentation, and segregation of responsibilities.
- Support business continuity, disaster recovery, incident response, and operational resilience assessments from a governance and risk perspective.
- Track audit findings, control deficiencies, security risks, exceptions, and corrective action plans through remediation and closure.
- Perform follow-up assessments to validate that corrective actions adequately address identified risks and control deficiencies.
- Prepare GRC dashboards, risk reports, compliance assessments, findings summaries, and remediation status reports for management and relevant stakeholders.
- Collaborate with cybersecurity, IT operations, cloud, engineering, internal audit, compliance, legal, finance, and business teams to strengthen the organization's control environment.
- Monitor changes in cybersecurity regulations, industry standards, emerging threats, and technology risks and assess their potential impact on organizational controls and compliance obligations.
Loan/Credit Officer at ODOTOBRI RURAL BANK PLC-BEKWAI, ASHANTI REGION, GHANA (2017-03 – 2022-09)
- Meet with applicants to obtain information for loan application and answer questions about process.
- Researched and analyzed appropriate loan programs to match borrower's profile.
- Resolved customer loan problems through research and investigation.
- Analyzed applicant's financial status, credit and property evaluation to determine feasibility of granting loans.
- Loan appraisal, classification and recovery
- Calling over vouchers
- Operational duties and any other duties assigned
Revenue Officer at SENE WEST DISTRICT ASSEMBLY, KWAME DANSO, BRONG AHAFO REGION, GHANA (2015-07 – 2016-08)
NATIONAL SERVICE
- Created reports on financial performance, providing key metrics.
- Verified calculations and checked numbers against supporting documentation, helping prevent major errors and quickly resolve problems.
- Forecasted and modeled funding, revenue and profitability.
Education
Bachelor of Business Administration in Accounting – Kwame Nkrumah University of Science and Technology, Ghana (2023)
Higher National Diploma in Accounting – Sunyani Polytechnic, Ghana (2012 – 2015)
