Conducting ISMS 27001:2022 Implementation:- Develop and implement procedures.- Design and establish security policies.- Execute risk assessments based on ISO 27005 or MEHARI frameworks.- Ensure compliance with ISO standards and continuous improvement of security measures.Participating in CAC misssionsConducting IT Audits:- Perform penetration testing to assess vulnerabilities.- Conduct thorough vulnerability assessments.- Perform gap analysis to identify areas for improvement.- Review and update ISMS documentation (policies, procedures, etc.).- Evaluate and audit network and security configurations for compliance and optimization.Conducting SWIFT CSP Audit:- Review procedures and policies for compliance with SWIFT Customer Security Programme (CSP).- Audit SWIFT components and related software (Alliance Access, web platform, swift.com, O2M, etc.).- Assess IT infrastructure related to the SWIFT secure zone, including firewalls, switches, hypervisors, backup solutions, and associated servers.- Evaluate physical security measures protecting the SWIFT environment.

Performing SWIFT CSP Audit & Implementation:- Review and implement SWIFT Customer Security Programme (CSP) controls.- Audit SWIFT components (Alliance Access, Web Platform, swift.com, O2M, etc.).- Assess and ensure compliance of IT infrastructure related to SWIFT secure zones.Conducting Trend Micro ApexOne Installation and Configuration:- Install and configure Trend Micro ApexOne for endpoint security management.- Ensure proper integration with network security systems and compliance with security policies.Installing and Configuring Active Directory and Components:- Set up and configure Active Directory (AD) with key components like AD Certificate Services (ADCS) and DNS.- Implement secure user and group management and configure Group Policy Objects (GPOs).Performing Vulnerability Assessment and Compliance Checks:- Conduct thorough vulnerability assessments to identify security risks.- Evaluate compliance with relevant security standards and provide mitigation strategies.Performing Web Penetration TestingAssistance in SWIFT Training:-Develop training labs for SWIFT systems (SAA, SWP): SWIFT application audits, administration, and system hardening for secure configurations.

Cybersecurity audit and hardening of SIOTH Platform: - Vulnerability scanning - Penetration testing - Network analysis - Developing a remediation plan...