Jennifer Adele

Cybersecurity, GRC and IT Risk professional with hands-on experience across security risk management, vulnerability management, threat intelligence, incident response, security awareness, and third-party risk. Authored 20+ security policies, frameworks, and SOPs; run quarterly phishing simulations and vulnerability assessment cycles; and supported multi-jurisdictional regulatory licensing and application initiatives (SEC digital assets and CBN). Skilled at translating technical findings and threat data into measurable risk reduction, board-ready reporting, and actionable remediation plans aligned to global standards (ISO 27001, NIST RMF, GDPR, PCI-DSS).

Cybersecurity Compliance and Risk Management Officer - ZABIRA TECHNOLOGIES - Lagos, Nigeria

(2024-08)

• Risk Register & Assessments: Run continuous cybersecurity risk assessments and maintain the enterprise security risk register, tracking 20+ active risks across owners, treatment plans, and residual risk, reducing average remediation turnaround by 60%.
• Vulnerability Management: Conduct vulnerability assessments using Burp Suite, OWASP ZAP, and related tools; document and prioritize 10+ findings per cycle by severity and business impact, driving 75% of critical/high findings to closure within SLA.
• Threat Intelligence: Lead continuous threat intelligence and cybersecurity landscape monitoring across the fintech and digital-asset sector, producing six (6) intelligence briefings per quarter that inform defensive prioritization and risk decisions for leadership.
• Security Awareness & Phishing Simulation: Design and deliver security awareness programs (including phishing, insider risk, endpoint security, malware, social engineering) and run quarterly phishing simulations across 50+ employees, reducing click-through/susceptibility rate by 80% over 16 cycles.
• Incident Management: Document and manage security incidents end-to-end, summaries, business impact, root cause, corrective action, and lessons learned, contributing to 60% reduction in repeat incidents.
• Policy & Governance: Authored and implemented 20+ information security policies, frameworks, procedures, and SOPs, establishing enterprise-wide security governance aligned to ISO 27001 and NIST RMF.
• Third-Party Risk: Conduct third-party/vendor risk assessments across 10+ vendors, identifying critical control gaps and driving remediation to closure.
• Product Security: Support security reviews for 10+ product/feature releases, embedding access control, authentication, API security, and transaction-integrity requirements before launch.
• Regulatory & Licensing Support: Support SEC digital-assets licensing initiatives and CBN Sandbox applications, preparing 10+ compliance and risk documentation deliverables (including access management, incident response, vulnerability management) submitted to the regulators.
• Transaction & Fraud Monitoring: Monitor security-relevant transactions and system activity, flagging suspicious patterns/anomalies per [month] for investigation, supporting fraud prevention efforts.
• Security Governance: Review security controls against ISO 27001, NIST, and applicable regulatory requirements, maintaining audit-ready documentation for internal and external audits.

Cybersecurity Analyst Intern — Hands-On Training Program - CYBLACK - Lagos, Nigeria

(2024-05 - 2024-07)

• Vulnerability Management: Carried out assigned vulnerability assessments using OWASP ZAP, Burp Suite, and Kali Linux across systems and applications, identifying exploitable weaknesses and prioritizing findings to inform remediation.
• Threat Intelligence: Completed assigned OSINT-driven threat intelligence tasks, monitoring emerging attack trends and open-source data to produce 10+ threat briefings for the security team.
• Cloud Security: Carried out assigned cloud security tasks, administering Azure Active Directory identity and access controls, managing user accounts under least-privilege access policies.
• Human Factors & Social Engineering: Completed assigned exercises assessing human-factor security risk, including social-engineering susceptibility across simulated scenarios, feeding findings into awareness and training recommendations.
• Third-Party Risk: Carried out assigned third-party/vendor risk assessments across vendors, auditing against security requirements and documenting external risk exposure.
• Policy Development: Contributed to assigned policy-development tasks, helping draft information security policies and controls that strengthened organizational security posture.

Bachelor of Science (B.Sc.) - Computer Science - University of Calabar (2018-10)