Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

TOSIN JIMOH

Dip. Information Security, GCIH, GSEC, GFACT, CCSP

Summary

A dedicated and analytical Cyber Security Risk Analyst with 5+ years of experience in assessing, mitigating, and managing cyber risks within complex IT infrastructures. Skilled in performing risk assessments, developing recommendations, and ensuring alignment with industry standards and regulatory requirements. Experienced in collaborating with cross-functional teams to enhance cybersecurity controls and safeguard organizational assets.

Overview

9
9
years of professional experience
1
1
Certification

Work History

Senior Cybersecurity Risk Analyst

Telecon
12.2021 - Current
  • Work with various business units to conduct threat risk assessments of various applications
  • Provide security recommendations to business stakeholders to mitigate identified gaps/risks
  • Prepare detailed risk assessment report and communicate risk findings with stakeholders
  • Document residual risks into the risk register and follow up with risk owners to ensure timely remediation of risk
  • Provide risk remediation updates to the senior leadership team
  • Perform third-party security risk assessments and ongoing monitoring of all third-party vendors
  • Work with various business units to collect evidence for security audits

Information Security Analyst

Arctic Canadian Diamond Company
03.2020 - 11.2021
  • Conducted security assessments to identify gaps, and provide actionable recommendations to stakeholders
  • Performed triage and in-depth analysis across endpoints, servers, and network infrastructure
  • Engaged in threat hunting to detect and isolate threats on organizational networks, advising on mitigation strategies
  • Monitored and responded to security incidents in real-time
  • Updated team documentation and runbooks to standardize analysis procedures
  • Created and configured firewall objects and policies to meet organizational requirements

Security Analyst I

Castellum Consulting
03.2016 - 02.2020
  • Conducted risk assessments to evaluate the impact of proposed technological changes on the organization’s security posture
  • Audited end-user and privileged admin accounts, collaborating with teams to promptly address and close audit findings
  • Developed a comprehensive cybersecurity awareness plan, overseeing activities such as cybersecurity awareness training, and phishing simulations
  • Maintained and updated the risk register to track and manage identified risks throughout their lifecycle
  • Handled IT security incidents and fulfilled service requests in the ticketing system
  • Compiled monthly security operations metrics to assess program effectiveness

Education

Cloud Computing -

Humber College
04.2024

Information Systems Security -

Southern Alberta Institute of Technology
04.2022

Accelerated Certified Training Program -

Toronto Metropolitan University
02.2022

Skills

  • Threat Risk Assessment
  • Vulnerability Assessment
  • Network and Security Operations
  • Security Information Event Management (SIEM)

Certification

  • GIAC Certified Incident Handler (GCIH)
  • GIAC Security Essentials Certificate (GSEC)
  • GIAC Foundational Cybersecurity Technologies Certification (GFACT)
  • CompTIA CySA+
  • Microsoft Certified: Cybersecurity Architect (SC-100)
  • Microsoft Certified: Azure Security Engineer Associate (SC-200)
  • Microsoft Certified: Identity and Access Administrator (SC-300)
  • Microsoft Certified: Information Protection Administration (SC-400)
  • Fortinet FortiGate Administrator 7.2
  • ISC2 Certified Cloud Security Professional (CCSP)
  • ISC2 Certified Information Systems Security Professional (CISSP) (in-view)

Timeline

Senior Cybersecurity Risk Analyst

Telecon
12.2021 - Current

Information Security Analyst

Arctic Canadian Diamond Company
03.2020 - 11.2021

Security Analyst I

Castellum Consulting
03.2016 - 02.2020

Information Systems Security -

Southern Alberta Institute of Technology

Accelerated Certified Training Program -

Toronto Metropolitan University

Cloud Computing -

Humber College
TOSIN JIMOH