JOY JONATHAN NURIA OYIBO

Governance, Risk & Compliance (GRC) Analyst

Lagos, NG.

About

Highly analytical GRC Analyst with robust practical experience in risk assessment, vulnerability management, and regulatory compliance across ISO 27001, NIST CSF, GDPR, and PCI DSS frameworks. Leverages over 15 years of leadership in educational operations to drive process optimization, enhance documentation, and coordinate cross-functional teams, ensuring stringent operational standards and effective governance.

Work

Educational Institution (Inferred)

|

Senior Operations Lead

Lagos, Lagos State, Nigeria

→

Summary

Directed comprehensive operational strategies for educational institutions, overseeing structured processes, staff coordination, and the maintenance of high educational and administrative standards for over a decade.

Highlights

Led school operations for over 10 years, implementing structured processes that improved efficiency and consistency across all departments.

Supported policy enforcement and delivered training programs, enhancing organizational consistency and compliance with internal and external standards.

Managed diverse teams, optimizing workflow efficiency and ensuring adherence to established procedures, fostering a collaborative and high-performing environment.

Developed comprehensive documentation for operational procedures, significantly improving clarity, accountability, and staff onboarding processes.

Education

Lagos State University

Lagos, Lagos State, Nigeria
→
Bachelor of Arts (B.A.) English Language Grade:

Languages

English

Certificates

Lead Implementer ISO 27001 and ISO 42001

Accredited Body (Inferred)

Cybersecurity Training

Axia Africa

Introduction to Cybersecurity

Cisco

Governance, Risk & Compliance (GRC)

ICDFA (Ongoing)

ISO 27001

ICDFA (Ongoing)

Diploma in Risk Management

OHSC UK

Skills

Risk Management

Risk Assessment, Risk Register Development, Threat Identification, Quantitative Risk Analysis (SLE, ALE, ARO), Vendor Risk Management.

Compliance & Governance

ISO 27001, NIST CSF, CIS Controls, GDPR, HIPAA, PCI DSS, ISO 27701, SOX, FCPA, GLBA, Compliance Mapping, Policy Development, Governance Documentation, Audit Preparation & Support, Regulatory Compliance.

Vulnerability Management

Vulnerability Assessment, CVE Interpretation, Nmap, Nikto, Nuclei, xsltproc, OWASP Top 10, Burp Suite Pro, Technical Controls.

Security Operations

SIEM & Log Analysis, Incident Response Procedures, File Integrity Monitoring (FIM), Security Monitoring, Incident Analysis, Phishing Risk Analysis.

Technical Tools & Frameworks

Wazuh, Nmap, Nikto, Nuclei, xsltproc, Burp Suite Pro, ISO 31000, NIST CSF, CIS Controls, ISO 27001, ISO 27701, GDPR, HIPAA, PCI DSS.

Leadership & Operations

Documentation, Process Coordination, Team Leadership, Operational Standards, Policy Enforcement, Training Delivery, Workflow Efficiency, Strategic Planning, Cross-functional Collaboration.

Projects

Governance, Risk & Compliance Portfolio

→

Summary

Comprehensive portfolio of hands-on projects demonstrating expertise in risk management, vulnerability assessment, security monitoring, and compliance across various industry-standard frameworks.