Belinda Effah
CYBERSECURITY ANALYST
Burlington,NJ
Summary
Highly motivated IT security professional with passion for cybersecurity. Recognized for ability to build and maintain strong customer relationships to understand needs and deliver value- driven solutions. Currently seeking an Information Security and Risk Analyst position in a growth-oriented organization specializing in Governance, Risk and Compliance (GRC). Fully authorized to work in the United States for any employer.
Overview
9
9
years of professional experience
Work History
Cyber Security Analyst
Assurant
Remote
09.2022 - Current
- Process walkthroughs, testing, and documentation of various IT General Controls including Access, Change Management, Computer Operations, etc.
- Obtaining, analyzing and appraising evidentiary data
- Drawing informed objective opinions as to the adequacy and effectiveness of IT controls
- Preparing work papers summarizing evidentiary data obtained and conclusions reached
- Identify and evaluate complex business and technology risks, internal controls which mitigate risks, and related opportunities for internal control improvement
- Facilitate use of technology-based tools and methodologies to assess the design and operating effectiveness of controls and implement services
- Adapt to the ever-changing compliance landscape and keep abreast with the latest IT threats, mitigation Techniques, etc.
SLA Coordinator
BNP Paribas
12.2021 - 06.2022
- Collaborate with business owners (sponsor) to fully understand the nature of their request
- Manage and coordinate the agreements process from introducing agreements to entities to negotiating its details
- Facilitate and manage editorial, review and proof-read process together with concerned entity ensuring agreement are written in a clear, concise, and precise manner, agreeable and understood by all parties involved
- Facilitate technical and legal negotiations with each entity on specifics relating to the Agreement, establish review process, manager version control, channel feedback, and provide clarification with the support of the legal department and/or business sponsors if required
- Ensure that SLAs are drafted and executed in line with regulatory requirements and third-party risk management framework for affiliate's onboarding
- Monitor, Review and update the SLA team's control: GAP Analysis, Step 1.5 Invoicing, Invoicing from affiliates and recertification
- Perform business analysis and advice business owners how to properly document a relationship
- Assist in the development or improvement of SLAs to help facilitate services among different entities
Vendor Risk Management Analyst
Apple Bank
07.2018 - 11.2021
- Third Party Risk Management of enterprise third party relationships including pre-contract screening, onboarding, InfoSec contract provision review, engagement risk assessment (ERA), and vendor termination
- Work with inherent risks to ensure adequate controls are in place to reduce control gaps, resulting in acceptable residual risks consistent with Securitas policies and procedures
- Coordinate with SOX and PMO business partners for in-scope vendors to ensure proper artefacts are obtained
- Review vendor performance related to Service Level Agreements (SLAs) and Key Performance Indicators (KPIs) and verify inclusion of these terms in contracts related to SaaS cloud and other business critical deployments that involve PII, PHI, and other mission critical suppliers
- Monitor, Review and Update SLA team's control
- Maintains internal documentation library, ensuring that process and other documentation is regularly updated to reflect the latest operational processes and requirements
HIPAA Compliance Specialist
Saint Barnabas Medical Center
05.2017 - 06.2018
- Practice of HIPAA law while confidentially handling patient's private medical information and documents
- Review records once received to ensure completeness and contact hospital/facilities as necessary to verify information
- Efficiently and effectively, identify, evaluate, and manage risk to the business while addressing the evolving regulatory requirements, Information and Privacy Protection
- Conducts HIPAA compliance investigations to determine if an incident of non-compliance, unauthorized disclosure, or privacy breach has occurred
- Interview employees to ensure compliance with applicable laws and regulations
Education
Bachelor of Science - Administration Major in Accounting
University of Ghana
Accra, GhanaSkills
Cybersecurity
Security assessments
Vendor management
Security awareness
Policy development
Security assessments
Vendor management
Policy development
Security policies and procedures
Vendor remediation
Security compliance
Vendor risk assessment
Collaboration with legal and IT teams
Security metrics monitoring
Vendor audits
Audit activities
Risk management
Security policies and procedures
Vendor remediation
Security compliance
Vendor risk assessment
Collaboration with legal and IT teams
Security metrics monitoring
Vendor audits
Audit activities
Risk management
Accomplishments
- Vendor Risk Reduction: Reduced vendor risk by 30% through streamlined assessments and compliance measures.
Timeline
Cyber Security Analyst
Assurant
09.2022 - Current
SLA Coordinator
BNP Paribas
12.2021 - 06.2022
Vendor Risk Management Analyst
Apple Bank
07.2018 - 11.2021
HIPAA Compliance Specialist
Saint Barnabas Medical Center
05.2017 - 06.2018
Bachelor of Science - Administration Major in Accounting
University of Ghana