Maje Agba Email & Phone Number

Largo, Maryland, United States

Conduct third party security assessments for all new vendors and reassessment for existing vendors. Analyzed vendor evidence such as SOC, Vulnerability Scans and Penetration Test reports to identify gaps. Develop and maintain a comprehensive inventory of third-party vendors and suppliers and track their cybersecurity risk profiles. Monitor third-party vendors and suppliers for changes in their cybersecurity risk profiles and report any concerns to management. Provided guidance and recommendations to internal teams on best practices for managing third-party cybersecurity risks. Assisted in the design, implementation, training, and maintenance of common controls framework for continuous testing and monitoring of all information security controls and activities related to SOC2, PCI-DSS.Collaborate with internal audit teams to review and validate third-party compliance with policies and procedures. Manage relationships with third-party vendors, including ongoing monitoring and assessments of vendor security posture. Communicate effectively with stakeholders to provide updates on vendor risk assessment status, risk mitigation strategies, and compliance with regulatory requirements.

Silver Spring, Maryland, United States

Conducted Comprehensive IT Security Controls Assessments: Carried out in-depth assessments of IT security controls, revealing potential areas of vulnerability and non-compliance. Technical Testing for Risk Mitigation: Performed technical testing on IT systems and applications, including vulnerability assessments, aiming to identify and mitigate potential security risks. Collaboration for Process Improvement: Collaborated closely with IT and business teams to pinpoint opportunities for enhancing controls and processes. This collaboration led to the development and implementation of solutions that bolstered IT security and compliance.Execute IT control risk assessments; including reviewing organizational policies, standards and procedures to provide advice on their compliance. Develop assessment criteria to identify and prioritize risk interaction, privacy impact conformance with applicable legal, regulatory, and policy requirements for privacy. Create POA&M (Plan of Action & Milestones) document to take corrective actions resulting from ST&E (System Test & Evaluation) Assess program and security controls using Organization IT Security Policy Handbook and NIST Special Publications to provide information necessary to determine their overall effectiveness. Install software, such as firewalls and data encryption programs to protect highly sensitive information, Work with various stakeholders to identify information asset owners to classify data and systems as part of a control framework implementation.

Education record

Associate'S Degree