Nathaniel Konu

Background

About Nathaniel Konu

Highly motivated and dynamic Cyber Security Professional with over 8 years of experience throughout multiple roles within the information security field driving cross-functional collaboration with team members of varying backgrounds, experience levels, and core responsibilities to implement best practices, harden internal systems, and improve overall security posture within an organization.Subject Matter Expert in ISO Standards and guidelines, FISMA, FedRAMP, NIST RMF, NIST CSF, SOC 2 Type 2, System Security Monitoring and Auditing, Risk Assessments, Security Control Assessment (SCA), and Developing Security Policies and Procedures concerning NIST Standards and guidelines.Notable Governance, Risk and Compliance Impacts: Vulnerability Assessment & Incident Management: Actively research and investigate emerging threats on business critical systems in order to mitigate or resolve the risk of potential breaches following industry standard practices and compliance (ISO 27001, FedRAMP). Strategic Organization: Proven ability to design and lead security related projects and initiatives with keen attention to detail in identifying relevant technical and human resources and clearly outlining the responsibilities of each party to achieve organizational goals and assist in overall business growth. Cross Department Communication: Leverage strong organizational and communication skills in demonstrating and teaching colleagues how to access and navigate systems securely and efficiently with best practices.Cyber Security Areas of Expertise Ability to quickly learn and consistently apply new techniques and technologies to improve compliance metrics. Work with Security Operation, Engineers and Privacy teams to understand the information security and privacy risk profile and use this knowledge for ISO audit planning and execution. Leverage automation to collect and analyze complex data, evaluate systems and their related controls, and draw logical conclusions in conformity with standards ISO/IEC 27001 Lead Implementer and Auditor with 27017 and 27018 experience Lead SOC 2 compliance projects Perform assessments based on NIST 800.53 NIST 800.171Technical Tools: Crowdstrike EDR, McAfee DLP and EPO Qualys, Rapid7, Nessus Vulnerability Scanner Exabeam SIEM, KnowBe4 AuditBoard, Eramba, OneTrust, Jira, ServiceNow, Jira, BMC HelixExperience in: Technical and Policy Writing Training & Development Vulnerability and Risk Assessment IT AuditingFeel free to reach out to me directly:Nathanielkonu10@gmail.com