Summary
Overview
Work History
Education
Skills
Accomplishments
Certification
Timeline
Generic

Efe Onasanya

Information Security Professional
Lagos,Lagos

Summary

Objectives A resourceful, analytical and dependable person, continually striving for excellence in order to attain and maintain a high degree of professionalism based on performance and results. I have learnt to communicate effectively, engage my people-oriented skills to motivate my team and colleagues to achieve organizational goals, contributing to the growth and development of the organization through the display of diverse skills and competence to ensure delivery of superior value to the stakeholders, while still guaranteeing a reasonable level of career development and offer new paradigm and innovation where I can.

Overview

16
16
years of professional experience
4
4
years of post-secondary education
6
6
Certifications

Work History

Head. Governance Risk and Compliance

Keystone Bank Limited
Victoria Island, Lagos
07.2020 - Current
  • Showed leadership in development and delivery of the Cybersecurity roadmap.
  • Designed and reviewed security solutions for applications and infrastructure.
  • Made recommendations on security controls
  • Identified issues,analyzed information and provided solutions to information security problems.
  • Collaborated with Enterprise Architecture, and solutions design specialists to develop strategies, roadmaps, standards, guidelines, and designs
  • Collaborated with Information Technology and EBusiness divisions to achieve 87% risk closure in every fiscal year.
  • Guided project, development, and other multi-disciplinary teams to embed IT security as part of the design lifecycle.
  • Ensured operational practices comply with security policies and standards.
  • Consulting with IT and business stakeholders to provide cybersecurity subject matter expertise
  • Delivered exceptional level of service to each customer by listening to concerns and answering questions.
  • Used critical thinking to break down problems, evaluate solutions and make decisions.
  • Prepared a variety of different written communications, reports and documents to ensure smooth operations.
  • Prepared and disseminated Board and Management level reports, detailing current information security risks and solutions.
  • Monitored implementation of agreed controls to ensure 100% implementation within time and cost budgets

Information Security and IT Risk Officer

Keystone Bank Nigeria
Victoria Island, Lagos
11.2010 - 12.2019
  • Review existing and new banking products and processes to identify risk and propose effective controls.
  • Review product papers to ensure adequate controls are built in prior to go live.
  • Review procedures and policies to ensure they conform with sound business practice.
  • Develop new policies and standards for risk management in conjunction with relevant stakeholders.
  • Develop and implement key risk and control indicators.
  • Assist in tracking and monitoring operating risk issues for business units.
  • Developed and administer risk based self-assessment (RCSA) template for the quarterly review and identification of procedural risks in various business functions.
  • Assist in identifying and evaluating risk areas across the operational activities.
  • Maintain and update relevant risk and loss registers.
  • Investigate root causes of operational risks and provide support to mitigate risk.
  • Maintain documentation for risk management and risk policies and procedures.
  • Departmental process mapping to identify weaknesses and control needs.
  • Perform regular process and asset based risk reviews on different teams, with emphasis on the eBusiness and Information Technology Divisions.
  • Incorporated standard controls from the ISO 27001, Payment Card Industry Data Security Standard (PCI DSS) in to the risk management process.
  • Review and sign-off on all change requests and business requirements documentations.
  • Develop strong relationship with key stakeholders and business partners by addressing issues/concerns in timely manner.
  • Document risks, results of assessments, and breaches.
  • Report Key Risk Issues at the MRCC and Board Risk Committee Meetings.
  • Facilitate business continuity testing.
  • Facilitate Internal Training for New and Experienced Hires.
  • Developed plans to safeguard computer files against modification, destruction or disclosure.
  • Recommend improvements in security systems and procedures.
  • Performed risk analyses to identify appropriate security countermeasures.
  • Conducted security audits to identify vulnerabilities.
  • Led projects and analyzed data to identify opportunities for improvement.
  • Supervised work of contracted employees to keep on task for timely completion.

Banking Officer, Audit

Access Bank Limited
Victoria Island, Lagos
10.2006 - 10.2008
  • Reviewed the effectiveness and efficiency of information security controls.
  • Reviewed business application system and e-banking facilities development, acquisition, implementation, training and support services.
  • Reviewed and certified in-house business applications.
  • User Acceptance Testing (UAT) for new applications.
  • Auditing of the Bank’s IT Infrastructure and Controls.
  • Preparing Quarterly Audit Reports for Management Meetings.
  • Identified control gaps in processes, procedures and systems through in-depth research and assessment and suggested methods for improvement.
  • Interviewed business owners, explained audit scope and conducted exit interviews of audit findings.
  • Produced and reviewed audit reports for submission to inspector general and advised on audit recommendations and internal controls.
  • Managed internal controls and assessed risks of technology network by performing information system audits of each division.
  • Participated in interviews, performed observations and evaluated pertinent information to supplement audit findings.
  • Developed auditing program to address risks and evaluate regulatory requirements.
  • Complied with established internal procedures by examining reports, processes and documentation.

IT Systems Manager

Nigerian Breweries Plc
Iganmu, Lagos
04.2002 - 04.2005
  • Training and supporting over 300 users;.
  • Domino and Lotus Notes Development and Administration.
  • Meeting with internal and external clients to ensure new requirements are met.
  • Document and maintain procedures.
  • Maintain User and Training Guides.
  • Set up new staff with access to systems.
  • Set up and maintain security and access rights.
  • Troubleshoot Technical Problems in Hardware, Network, Connectivity and other applications.
  • Follow up on new releases, patches, and any application or system anomaly.
  • Ensure staff have appropriate right access.
  • Install, configure and optimize system environment for Internet/Intranet.
  • Advise IT Management of implications and impact of system changes, nonage back-up facilities, monitor back-up logs, and perform enhancement and upgrades as needed.
  • Preparation and maintenance of system documentations.
  • Recommendation of configuration changes and customisations to maintain the most effective level of system security.
  • Recommendation of safeguards to protect systems from security risks.
  • Advise management on physical and biometric methods and measures to avoid physical security breaches.
  • Designed company-wide backup and data retention policies, monitoring ongoing efforts to prevent data loss.
  • Responded to incidents quickly, troubleshot problems and corrected faults.
  • Managed systems infrastructure at the head office facilities, overseeing logistical movement to maintain smooth operations and prevent equipment and skill deficits.
  • Created and maintained security policy documentation, detailing best practices and inherent goals.
  • Kept company servers operating at optimal performance levels.
  • Provided remote troubleshooting and support for users.
  • Identified computer hardware and network system issues, performing troubleshooting techniques for remediation.
  • Facilitated best user experience through continuous support, training classes, webinars, improvements and communication of system changes.
  • Analyzed network security and current infrastructure to assess areas in need of improvement and develop solutions.

Transactions Officer

Liberty Bank Plc
Orile- Coker, Lagos
09.2001 - 04.2002
  • Cash Handling and Payment.
  • Balancing of Cash.
  • Call Over of Transactions.
  • Vaulting in and Out of Cash.
  • Customer Service.
  • Used coordination and planning skills to achieve results according to schedule.
  • Worked flexible hours; weekend, and holiday shifts.
  • Exceeded goals through effective task prioritization and great work ethic.
  • Maintained energy and enthusiasm in fast-paced environment.
  • Worked to maintain outstanding attendance record, consistently arriving to work ready to start immediately.
  • Actively listened to customers' requests, confirming full understanding before addressing concerns.
  • Collaborated with customer service departments to achieve 88% customer satisfaction survey results.
  • Participated in continuous improvement by generating suggestions, engaging in problem-solving activities to support teamwork.
  • Used critical thinking to break down problems, evaluate solutions and make decisions.
  • Developed team communications and information for meetings.

IT Sales and Sevice Assistant

Ajamy Group of Companies Limited
Apapa, Lagos
04.2001 - 09.2001
  • Sourcing, Preparation and Negotiation of Networking Contracts.
  • Management and Design of Networking and Hardware Projects.
  • Set and maintain standards for client based projects.
  • Used critical thinking to break down problems, evaluate solutions and make decisions.
  • Worked to maintain outstanding attendance record, consistently arriving to work ready to start immediately.
  • Created plans and communicated deadlines to ensure projects were completed on time.
  • Participated in continuous improvement by generating suggestions, engaging in problem-solving activities to support teamwork.
  • Offered friendly and efficient service to all customers, handled challenging situations with ease.
  • Developed and maintained courteous and effective working relationships.
  • Participated in team-building activities to enhance working relationships.
  • Quickly learned new skills and applied them to daily tasks, improving efficiency and productivity.

Volunteer

Keystone
  • Bank Fire Marshals I presently volunteer in KBL fire marshals group and serve on the team as the fire evacuation coordinator for the 4th floor of the business premises, having attended trainings on fire prevention and evacuation, and rudimentary fire-fighting with emphasis on how to effectively deploy fire extinguishers for fighting small fires.

Education

MBA - Business Administration

University of The People
California
06.2019 - Current

BSc. Computer Science - Mathematics

University Of Benin

Senior Secondary Certificate - undefined

Federal Government Girls’ College

Skills

Telephone etiquette

undefined

Accomplishments

  • Information Security Risk Assessment.
  • E-Payment / Card Fraud Prevention, Detection & Control.
  • Risk Management and Control for Financial Industry.
  • Prince2 Project Management.
  • Introductory PMBOK.
  • Payment Card Industry Professional (PCIP).

Certification

Certified Information System Auditor (CISA)

Timeline

Head. Governance Risk and Compliance

Keystone Bank Limited
07.2020 - Current

MBA - Business Administration

University of The People
06.2019 - Current

Information Security and IT Risk Officer

Keystone Bank Nigeria
11.2010 - 12.2019

Banking Officer, Audit

Access Bank Limited
10.2006 - 10.2008

IT Systems Manager

Nigerian Breweries Plc
04.2002 - 04.2005

Transactions Officer

Liberty Bank Plc
09.2001 - 04.2002

IT Sales and Sevice Assistant

Ajamy Group of Companies Limited
04.2001 - 09.2001

Senior Secondary Certificate - undefined

Federal Government Girls’ College

BSc. Computer Science - Mathematics

University Of Benin

Volunteer

Keystone
Efe OnasanyaInformation Security Professional