Charles Nkwuoh

Senior Information Security Governance, Risk & Compliance (GRC) professional with 8+ years of experience leading cybersecurity governance, risk management, regulatory compliance, business continuity, and information security programs across financial services, telecommunications, and technology sectors. Experienced in ISO 27001, ISO 22301, PCI DSS, GDPR, NDPA, and NIST RMF, with a proven ability to lead teams, coordinate certification audits, manage third-party risk, and provide executive-level governance reporting. Passionate about strengthening organisational resilience through practical, risk-based security solutions.

Open to international relocation and remote opportunities.

Senior Information Security Governance, Risk & Compliance (GRC) Analyst - Global Accelerex

(2023-11)

Lead the organisation's Information Security Governance, Risk & Compliance (GRC) function, supporting secure business operations across a financial technology environment of approximately 250 employees. Provide strategic oversight of enterprise governance frameworks, regulatory compliance, cyber risk management, third-party assurance, and business continuity while leading a team of four Information Security professionals.

• Lead enterprise Information Security Governance initiatives aligned with ISO 27001, ISO 22301, ISO 20000, PCI DSS, GDPR, NDPA and the NIST Risk Management Framework (RMF).
• Manage and mentor a multidisciplinary GRC team of four, fostering a culture of accountability, continuous improvement, and operational excellence.
• Coordinate successful certification audits, surveillance audits, and regulatory compliance assessments while maintaining organisational audit readiness.
• Lead Third-Party Risk Management (TPRM) activities by conducting vendor security assessments, compliance reviews, and supplier risk evaluations.
• Oversee Business Continuity Management (BCM) and Disaster Recovery (DR) planning, testing, and governance in alignment with ISO 22301 requirements.
• Produce executive governance dashboards, security metrics, and compliance reports for senior management, supporting strategic risk-based decision-making.
• Present information security risks, governance updates, and compliance performance to executive leadership and governance committees.

Cybersecurity Governance, Risk & Compliance Specialist - Huawei Technologies

(2022-09 - 2023-09)

Supported enterprise cybersecurity governance programmes within a multinational technology environment by strengthening regulatory compliance, security governance, risk management, and organisational resilience across multiple business functions.

• Led implementation and monitoring of ISO 27001 security controls across business units, improving governance maturity and audit readiness.
• Coordinated regulatory compliance reviews and certification readiness activities supporting successful audit outcomes.
• Conducted enterprise cyber risk assessments and facilitated remediation programmes to address identified security control gaps.
• Developed and maintained cybersecurity governance frameworks, security policies, standards, and operational procedures.
• Collaborated with business leaders, technology teams, and operational stakeholders to integrate governance and security into enterprise processes.

Cybersecurity Analyst - ACT Markets

(2020-01 - 2022-09)

Supported enterprise cybersecurity operations by strengthening vulnerability management, security monitoring, regulatory compliance, and operational resilience within a fast-paced technology environment.

• Supported enterprise security operations through vulnerability management, incident response and compliance initiatives.
• Implemented automated vulnerability assessment and remediation workflows that improved remediation efficiency and reduced critical security exposures.
• Utilized Splunk SIEM to support threat monitoring, detection and incident response activities.
• Conducted security assessments and control reviews supporting audit readiness and regulatory compliance.
• Implemented and managed security technologies including DLP, IDS, IPS, endpoint protection and firewall solutions.
• Produced security reports and recommendations for management and key stakeholders.
• Collaborated with development, infrastructure and operations teams to integrate security into business processes and technology platforms.

IT Support Officer - Deredu Limited

(2017-11 - 2019-12)

Delivered enterprise IT support, infrastructure administration, and technology services while contributing to digital transformation and operational efficiency initiatives.

• Managed IT infrastructure, end-user support, and technology asset management across business operations.
• Supported deployment of Microsoft 365, SharePoint, cloud communication platforms, and enterprise collaboration solutions.
• Coordinated technology implementation projects that improved operational efficiency and service delivery.

Bachelor of Science (B.Sc.) (Hons.) - Information Technology - Kwame Nkrumah University of Science and Technology, Ghana (2013 - 2016)

Diploma - Information Technology - Accra Institute of Technology, Ghana (2013)