Okony Cham

I’m a results-driven cybersecurity and IT professional with over a decade of experience supporting secure infrastructure, regulatory compliance, and systems administration across higher education and public service environments. My expertise spans identity and access management (IAM), governance, risk, and compliance (GRC), and incident response—backed by hands-on proficiency in system hardening, vulnerability remediation, and access control across Windows, Linux, and virtualized platforms.

I specialize in implementing security frameworks aligned with NIST and ISO 27001 standards, conducting risk assessments, and supporting internal and external audits. Whether advising on policy integration, leading technical deployments, or translating complex security concepts for diverse stakeholders, I bring a collaborative, equity-driven approach to every engagement.

Available for freelance projects, consulting, and strategic partnerships focused on cybersecurity engineering, GRC initiatives, and regulatory alignment in education, healthcare, and mission-driven sectors.

I am a motivated cybersecurity and IT professional with 10+ years of experience in desktop support, systems administration, and compliance across education and public service. Trained in IAM, GRC, and incident response. Skilled in system hardening, access control, and vulnerability remediation across Windows, Linux, and virtualized environments.

Proven ability to implement secure infrastructure, conduct risk assessments, and support audits using NIST and ISO 27001 frameworks. Strong communicator and collaborator, ready to contribute to cybersecurity engineering and GRC initiatives in a dynamic team setting.

M.S. Cybersecurity & Information Assurance

Southern Utah University – Cedar City, UT (2024)

Master of Public Administration (MPA)

Minnesota State University – Mankato, MN

M.S. Community Health Education

Minnesota State University – Mankato, MN

Certifications & Training

• Certified in Cybersecurity (ISC2)
• ITIL Foundations
• 7-month intensive cybersecurity training (Dec 2025–Jun 2025) 
  • Focus: Access Control, Identity Management, Systems Administration
  • Tools: MFA, SSO, Active Directory, LDAP
  • Frameworks: NIST, ISO 27001
  • Skills: Patch management, system hardening, incident response, GRC policy development