Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

Elom Eklou

Omaha,NE

Summary

Information Security Specialist with passion for aligning security architecture plans and processes with security standards and business goals. Extensive experience developing and testing security framework for cloud-based software. Versed in robust network defense strategies.

Overview

3
3
years of professional experience
1
1
Certification

Work History

Cybersecurity Analyst

DDCN
01.2023 - Current
  • Collaborated with IT teams to integrate security measures into the development and deployment of new applications.
  • Conducted security audits to identify vulnerabilities via Tenable Nessus.
  • Analyzed security incidents post-resolution, identifying areas for improvement in both technical controls and incident response processes.
  • Reduced risk of cyber attacks by conducting regular vulnerability assessments and penetration testing.
  • Draft the FIPS199, SSP, POA&M,SAP,SAR,PIA,PTA
  • Work with the Assessor in the process of the initial ATO
  • Follow up all the finding in order to mitigate
  • Improved incident response times by developing and maintaining the Incident Response plan.
  • Draft the Contingency Plan,BIA within XACTA


Security Control Assessor

Fiserv
01.2023 - 03.2024
  • Performed gap analyses on existing security controls, identifying areas requiring improvement or additional measures.
  • Enhanced security control assessments by implementing a comprehensive evaluation process.
  • Supported incident response efforts by analyzing security breaches and recommending appropriate corrective actions.
  • Increased organizational compliance with industry standards such as NIST and ISO, by performing regular audits and reviews.
  • Make a system demo,interview to validate control during the assessment to receive initial ATO
  • Perform the annual assessment during the continuous monitoring phase.

Cybersecurity Engineer

Amazon
12.2020 - 09.2022
  • Work with the system team to ensure to draft the IRP.
  • Make a tabletop Exercise with the Incident response Team
  • Evaluated emerging security technologies, recommending appropriate tools to enhance organizational defense capabilities.
  • Established secure data storage methods, ensuring the confidentiality and integrity of sensitive information.
  • Developed and maintained company-wide endpoint security solutions.
  • Maintained strict adherence to regulations such as payment card industry (PCI) data security standard.

Education

Associate of Applied Science - Civil Engineering

Elatsha Institute
Togo
10.2014

High School Diploma -

Lycee Technique D'Adidogome
Togo
07.2011

Skills

  • Incident Response
  • Network Security
  • Phishing Detection
  • NIST SP 800 series, RMF,CSF
  • Vulnerability analysis
  • Cloud system (Azure and AWS)
  • Good communications skill
  • XACTA,CSAM,Sharepoint
  • PCI DSS, ISO 27001,FISMA

Certification

Certified Information Security Manager(CISM) in Progress.

Certified Governance Risk and Compliance(CGRC) in progress

Timeline

Cybersecurity Analyst

DDCN
01.2023 - Current

Security Control Assessor

Fiserv
01.2023 - 03.2024

Cybersecurity Engineer

Amazon
12.2020 - 09.2022

Associate of Applied Science - Civil Engineering

Elatsha Institute

High School Diploma -

Lycee Technique D'Adidogome
Elom Eklou