Bernard E. Mboe Email & Phone Number

United States

• Lead role in continuous development, monitoring and ensuring Zillow compliance to ISO27001, NISTCSF, GLBA, NIST 800-53 and a supporting role on PCIDSS, NACHA and Privacy compliancemaintenance.
• Point person for internal reviews, gap analysis and updating of internal policies, standard and procedureper changes in regulatory requirement and internal operational changes.
• Facilitated the alignment of organizational policies and controls with ISO27001, NIST CSF, GLBA,NIST 800-53, ISO 27001, frameworks and standards, and SOC 2 audit requirements.
• Carry out quarterly gap analysis efforts by identifying non-compliance issues, crafting corrective actionsplans, and work with subject matter expert (SME) and stakeholders to remediate gaps while trackingprogress in a.
• Developed and implemented risk management plans in accordance with NIST and ISO 27001guidelines.
• Monitored risk factors and provided detailed reports, actionable insights, and recommendations to seniormanagement.

United States

• Residence GRC SME, developed PureFinace compliance program from the ground up, developinginternal cybersecurity security policies and procedure, control library creation (leveraging NIST 800-53), asset triage and.
• Ensure alignment of cybersecurity practices with business objectives and regulatory requirements
• Assist in the creation and management of the cybersecurity governance framework
• Conduct risk assessments on third parties to identify and evaluate potential cybersecurity risks
• Develop and implement risk mitigation strategies and controls
• Monitor and report on risk management activities and the effectiveness of controls

United States

• Utilized Nessus and Qualys to conduct routine vulnerability assessments, identifying security flaws in thecompany's IT infrastructure.
• Examined and assessed data management, information security, and IT control frameworks to pinpointweaknesses and potential threats.
• Collaborated with cybersecurity engineers to troubleshoot performance and connectivity issues related tonetwork scanning and security assessment tools.
• Generated reports, analysed scan results, and provided technical guidance to engineering teams on the impactof security issues. Initiated remediation efforts to resolve identified vulnerabilities, documented.
• Conducted risk analyses to prioritize vulnerability management, assessing risks associated with detectedvulnerabilities based on exploit likelihood, impact, and exposure. Documented strategies for mitigating risks.
• Tested networks, applications, and IT systems to uncover vulnerabilities and recommended necessary fixes.