Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

Barbara Aryee

Hampton,GA

Summary

Results-driven and dependable Security Compliance Analyst with experience in Governance, Risk, and Compliance (GRC), specializing in Third-Party Risk Management (TPRM), vendor audits, and regulatory frameworks. Proven ability to assess and mitigate risks, manage compliance programs, and collaborate with global teams to ensure that security standards are consistently met. Excels at translating complex security requirements into actionable strategies. A dynamic individual with hands-on experience, adaptability, creativity, and a results-oriented mindset. Committed to making meaningful contributions and advancing organizational goals.

Overview

16
16
years of professional experience
1
1
Certification

Work History

Senior Security Compliance Analyst

DELL TECHNOLOGIES
03.2021 - Current
  • Lead third-party risk assessments and vendor audits, including SOC 1/SOC 2 reviews, PCI AoC, and penetration test evaluations.
  • Coordinate with vendors to ensure remediation of security incidents and exceptions.
  • Develop and maintain standards, guidelines, and documentation repositories for third-party risk management.
  • Collaborate with global offices, internal audit, and business units to perform data mapping and CUEC compliance reviews.
  • Support external audits and walkthroughs of internal processes to ensure control effectiveness.
  • Track and report key risk metrics, escalating critical third-party risks, and ensuring mitigation plans are in place.
  • Conduct on-site audits of vendor data centers and support centers.
  • Stay current with emerging cybersecurity threats, technologies, and regulatory changes.

Information Security Compliance Analyst

TGS Technologies
02.2017 - 03.2021
  • Performed Security Controls Assessments on applications/systems using specific compliance baselines such as PCI DSS, SOC Trust Service Criteria, HITRUST and NIST 800-53.
  • Coordinated with, and prepare for, enterprise-level and external compliance audits on quarterly and annual basses (e.g. PCI, HITRUST, SOC 2, NIST compliance) Supported ISO 27001 Compliance and Audit activities throughout year.
  • Responsible for administration of hospital central Patch Management System to ensure system security compliance.
  • Worked closely with Risk Management teams to ensure identified risks and all pertinent information is captured for risk analysis and are incorporated in appropriate risk assessment.
  • Ensured that security plans, controls, processes, standards, policies and procedures are aligned with organizational cybersecurity and compliance policies.
  • Engaged in Phishing campaigns to mitigate potential vulnerabilities to email phishing attacks targeted towards hospital employees.
  • Conducted technical vulnerability assessments, prioritize and track remediation efforts.
  • Engaged in basic network monitoring such as checking activity of local area networks for vulnerability management to support deployment, patching issues such as installing latest anti-virus software, updating programs on hosts, and vendor products to troubleshoot and resolve issue and verify resolution.

Risk Management Analyst

KAY-SERGE FLOORING & CARPETORY
12.2015 - 01.2017
  • Developed short-term goals and long-term strategic plans to improve risk control and mitigation
  • Reviewed contracts and agreements to identify potential risks and ideal mitigation strategies
  • Verified certificates of insurance for accuracy and conformance with internal risk management policies and coordinated issuance to individuals and entities
  • Advised senior managers on policy strategies for reducing liability and preventing losses
  • Encouraged stakeholders to approach assessments analytically and offer unique insights to bring new understanding to risk management programs
  • Trained staff in risk management policies and monitored compliance to control company liability

IT Audit

Zenith Bank
09.2009 - 12.2015
  • Liaised with 5 member- Business management on remediation, control improvements and to ensure awareness of changes in business activities
  • Supervised team members to provide exceptional services in areas of monitoring and delivery of cash related transactions
  • Worked closely with Compliance, Internal Control and Risk management teams on multiple projects ATM/ledger reconciliations
  • Performing annual audits
  • Performed follow-up activities to test implementation of management responses to transaction/Customer Audit Trail findings
  • Assisted in researching errors and discrepancies and suggest solutions
  • Assisted in fraud investigation and mitigation.
  • Self-motivated, with a strong sense of personal responsibility.
  • Skilled at working independently and collaboratively in a team environment.
  • Proven ability to learn quickly and adapt to new situations.
  • Excellent communication skills, both verbal and written.
  • Worked well in a team setting, providing support and guidance.
  • Used critical thinking to break down problems, evaluate solutions and make decisions.
  • Proved successful working within tight deadlines and a fast-paced environment.

Education

Master of Science - Business Psychology and Technology

University of South Wales
United Kingdom
04.2019

Bachelor of Arts - Statistical Data-Psychology

University of Ghana Legon
Ghana
01.2008

Skills

    Third-Party Risk Management (TPRM)

    Vendor Risk Assessments & Audits

    SOC 2, HIPAA, PCI-DSS, ISO 27001 applicability

    Risk Reporting & Metrics

    Incident Response Coordination

    Security Exception Management

    Data Mapping & CUEC Audits

    External Audit Support

  • Due Diligence
  • Corrective action Plans
  • Compliance monitoring

Certification


  • Certified Information Security Manager
  • CISA
  • SCRUM MASTER certification

Timeline

Senior Security Compliance Analyst

DELL TECHNOLOGIES
03.2021 - Current

Information Security Compliance Analyst

TGS Technologies
02.2017 - 03.2021

Risk Management Analyst

KAY-SERGE FLOORING & CARPETORY
12.2015 - 01.2017

IT Audit

Zenith Bank
09.2009 - 12.2015

Master of Science - Business Psychology and Technology

University of South Wales

Bachelor of Arts - Statistical Data-Psychology

University of Ghana Legon