Charles Njogu

Experienced Information Security Professional with a strong track record in designing and maintaining robust information security solutions. Expertise includes conducting thorough security risk assessments, devising effective remediation strategies, and implementing advanced technologies to mitigate risks. Skilled as a Threat Hunter, adept at proactively identifying and neutralizing cyber threats through detailed analysis of logs, network traffic, and threat intelligence reports, including indicators of compromise (IOCs).

Dedicated to staying current with the latest IT security trends and technologies, ensuring compliance with regulatory requirements, and fostering a culture of cybersecurity awareness. Demonstrated leadership in cross-functional collaboration, serving as a trusted subject matter expert in evaluating systems against security best practices. Passionate about Digital Forensics and Incident Response (DFIR), specializing in Incident Response Lifecycle, Monitoring and Analysis of Networks, NIST Cybersecurity Framework (CSF), and Cybersecurity Kill Chain methodologies.

Eager to leverage expertise in incident handling, forensic investigations, and response strategies to mitigate risks effectively at Prudential.

Information Security System Analyst - St. Norbert College - De Pere, WI (Remote)

(2024-09)

• Designed, implemented, and managed cybersecurity awareness and phishing simulation programs using Mimecast, Defender and CISA resources; developed training matrices, KPIs, and performance dashboards to measure compliance, training effectiveness, phishing susceptibility, and overall organizational cyber resilience.
• Chair the PCI DSS Compliance Committee, aligning institutional policies, internal audits, vendor risk management, and continuous compliance initiatives.
• Serve as overall HIPAA Security lead, ensuring administrative, technical, and physical safeguards, risk assessments, and ongoing regulatory compliance across the organization.
• Author and maintain 10+ Information Security policies and standards aligned with NIST, PCI DSS, and HIPAA frameworks.
• Develop and maintain the enterprise Incident Response Playbook, defining procedures for detection, containment, eradication, recovery, and post-incident review.
• Lead enterprise endpoint security strategy using Microsoft Defender and Intune to secure 1,500+ endpoints under Zero Trust architecture.
• Conduct and oversee firewall governance, auditing 1,000+ rules, optimizing configurations, and reducing attack surface by 25%.
• Lead penetration testing initiatives (internal and third-party), coordinating remediation efforts and strengthening defensive controls.
• Perform monthly vulnerability scanning using Tenable, tracking remediation, validating patch effectiveness, and reporting risk trends.
• Implement and operationalize Arctic Wolf MDR, establishing incident escalation workflows and reducing mean-time-to-detect from day to minute.
• Coordinate internal and external security audits (including SECIT360), achieving 95% control coverage and delivering executive risk reporting.
• Perform comprehensive security auditing across infrastructure, applications, and vendors to validate compliance and control effectiveness.
• Develop and facilitate incident response tabletop exercises to test readiness, improve cross-functional coordination, and strengthen recovery procedures.
• Direct proactive threat hunting using FortiAnalyzer, Tenable, and Nmap, identifying and remediating 200+ anomalies.
• Deliver enterprise cybersecurity awareness and phishing training to 300+ employees, reducing phishing susceptibility by 90%.

Information Security System Analyst - St. Norbert College - De Pere, WI (Remote)

(2024-09)

Key Achievements

• Managed and secured 1,500+ endpoints through Defender and Intune with centralized policy enforcement.
• Reduced firewall rule set from 1,000+ to ~750, eliminating redundancies and improving security posture.
• Remediated 95% of critical vulnerabilities identified through ongoing Tenable scanning.
• Successfully passed PCI DSS audit with zero major findings.
• Built executive dashboards and board-level reporting to communicate risk, metrics, and program maturity.
• Strengthened HIPAA compliance program through continuous risk analysis and control improvements.
• Improved detection and response capabilities through MDR integration, incident playbook development, tabletop exercises, and threat-hunting operations.

Director of Development - Global IT Solutions (GiTS) - Nairobi, Kenya (Remote, Part-time)

(2022-01 - 2025-12)

• Lead a multidisciplinary team of 5 interns, 3 professional programmers, and 5 sales representatives in the development and commercialization of innovative software products.
• Spearheaded the design and deployment of: POS System: A scalable point-of-sale solution tailored for small and medium-sized businesses. BizMeets: A business networking and scheduling platform enhancing client engagement and meeting efficiency. TruckBiz Manager: A mobile and desktop application empowering truck drivers to manage logistics, finances, and compliance.
• Implemented agile methodologies to streamline development cycles and improve team collaboration.
• Coordinated with the sales team to align product features with market demand, resulting in a 30% increase in client acquisition.
• Mentored interns through structured training programs, fostering skill development and preparing them for full-time roles.
• Oversaw budget planning, resource allocation, and vendor negotiations to ensure cost-effective operations.

Information Security Analyst / Program Lead - Binghamton University - Binghamton, NY (Contract)

(2021-01 - 2024-08)

• Designed, implemented, and managed cybersecurity awareness and phishing simulation programs using KnowBe4 and CISA resources; developed training matrices, KPIs, and performance dashboards to measure compliance, training effectiveness, phishing susceptibility, and overall organizational cyber resilience.
• Lead penetration testing initiatives (internal and third-party), coordinating remediation efforts and strengthening defensive controls.
• Perform monthly vulnerability scanning using Tenable, tracking remediation, validating patch effectiveness, and reporting risk trends.
• Implement and operationalize Arctic Wolf MDR, establishing incident escalation workflows and reducing mean-time-to-detect from day to minute.
• Coordinate internal and external security audits (including SECIT360), achieving 95% control coverage and delivering executive risk reporting.
• Perform comprehensive security auditing across infrastructure, applications, and vendors to validate compliance and control effectiveness.
• Develop and facilitate incident response tabletop exercises to test readiness, improve cross-functional coordination, and strengthen recovery procedures.
• Direct proactive threat hunting using FortiAnalyzer, Tenable, and Nmap, identifying and remediating 200+ anomalies.
• Deliver enterprise cybersecurity awareness and phishing training to 300+ employees, reducing phishing susceptibility by 90%.

Information Security Analyst / Program Lead - Binghamton University - Binghamton, NY (Contract)

(2021-01 - 2024-08)

Key Achievements

• Reduced firewall rule base from 1,000+ to ~450, improving manageability and reducing exposure.
• Lowered phishing success rates by 85% through continuous simulation and training.
• Completed 20+ forensic cases with accurate documentation for compliance use.
• Supported multiple compliance audits with zero major deficiencies.

Adjunct Computer Instructor - Montclair State University - Montclair, NJ

(2013-09)

• Teach courses such as Computer Concepts, MS Office, Windows 7 & 10, Python, HTML, and IT Project Management.
• Evaluate student learning styles and create Academic Action Plans.
• Maintain weekly communication with students and support academic progress.

Computer Instructor Lecturer - Bergen Community College - Paramus, NJ

(2011-09 - 2024-08)

• Delivered courses from basic computer literacy to advanced cybersecurity topics.
• Taught certification-prep classes for CompTIA A+, Network+, Security+, and Cisco CCNA.
• Helped develop a Cybersecurity Degree Program.

Adjunct Computer Instructor - Raritan Valley Community College - Branchburg, NJ

(2010-09 - 2021-08)

• Taught Computer Literacy, Networking Essentials, Systems Analysis & Design, and SQL Server 2008.
• Designed labs covering LAN/WAN, TCP-IP/OSI, UML, JAD, and Agile.
• Delivered practical hands-on SQL Server programming and security modules.

Adjunct Computer Instructor - New Jersey Institute of Technology (NJIT) - Newark, NJ

(2016-01 - 2018-05)

• Taught Networking (Network+) courses on hardware, protocols, LAN/WAN, and OSI/TCP-IP models.
• Provided personalized mentoring and monitored student academic progress.

M.S. - Cybersecurity - Bellevue University

B.S. - Cybersecurity - Bellevue University

M.S. - Management & Systems - New York University

B.S. - Network Design & Management - Western Governors University