Profileimage by Francis Jejelowo Cybersecurity Analyst, Information Security Services Specialist, Snr. Quality Assurance Tester from London

Francis Jejelowo

available

Last update: 06.09.2022

Cybersecurity Analyst, Information Security Services Specialist, Snr. Quality Assurance Tester

Graduation: PhD Information Security and Systems Management
Hourly-/Daily rates: show
Languages: English (Native or Bilingual) | Spanish (Limited professional)

Skills

Compliance (GDPR, Infosec Policies) Cryptography, Information Security, PCI-DSS, ISO27001, OWASP, SOX, Scanning, Burpsuite, Nmap, OpenVAS, Wireshark, Monitoring/Scanning, LogRhythm, DarkTrace, Tennable, JIRA, CRM, Gemini, Sharepoint, Confluence, ServiceNow, Software Development Life Cycle, scripting, Object-Oriented Programming, Java, C#, C++, Windows, Linux, Kali/Ubuntu, Mobile platforms, digital framework, Web-based services, Amazon - AWS, REST, database management and queries, SQL, MySQL, cloud, AWS, Azure, data protection, Nessus, Metasploit, network security, IT security, Continuous Integration, Jenkins, GitLab, penetration tests, firewalls, penetration tools, ERP, MS Word, Excel, automated tests

Project history

08/2019 - 01/2022
Snr. Information Security Consultant
RFF IT Consultants Ltd

Role and Responsibilities:

* Perform and coordinate Proof of Concept (POC) on latest technologies and make recommendations to
company executives and board members
* Produce and communicate periodic security metrics to board members
* Computer threat analysis and monitoring
* Participate in budgetary meetings and decision-making
* Organise and enforce periodic company-wide information security training in line with ISO27001,
PCI-DSS and GDPR statutes and other industry-related standards
* Good knowledge of ISO27001, NIST, PCI-DSS, GDPR.
* Perform and coordinate PCI-DSS and IT audits
* Perform and coordinate data protection audits
* Oversee incident management activities - disaster drills, business continuity plans
* Implement and maintain security controls - technical, procedural and physical
* Offer consultations on security-related matters to other departments
* Liaise with other branch offices in Europe and EMEA zones on project delivery
* IT Project delivery and management
* Manage security team member
* Create, review and distribute information security-related and data protection-related policies
* Undertake risk assessment activities - formation of risk committees, identification of risk
owners, etc
* Review and provide relevant information security improvements/recommendations to executives
and board members
* Oversee and conduct due diligence on third-party vendors and other client-facing activities
* Coordinate and enforce information security-related CBT for computer Programmers
* Attend regular trainings, seminars with a view to keeping up to date with latest information
and security trends
* Develop risk-based mitigation strategies for networks, operating systems, and applications
using Nessus, Burpsuite, OpenVas, Wireshark and Metasploit.
* Compiling and tracking of vulnerabilities and mitigation of results to quantify program
effectiveness using Jira
* Creation and maintenance of vulnerability management policies, procedures, and training
* Revision and defining of requirements for information security solutions
* Organising network-based scans to identify possible network security attacks and host-based
scans to identify vulnerabilities in workstations, servers, and other network hosts.

* Major Achievements so far:
* Created and implemented a process to capture and report internal security breaches
* Proof of Concept on a new email monitoring tool, which was implemented based on my
recommendations
* Implemented a company-wide CBT on data protection

09/2018 - 06/2019
Cybersecurity Analyst
Jaguar Land Rover

Role and Responsibilities:
* Perform and coordinate Proof of Concept (POC) on latest technologies and make recommendations to
executives
* Participate in budgetary meetings and decisions
* Major Achievement: Established and kitted an IT security laboratory for the Irish Head Office
* Organise periodic infosec training for non-tech personnel in line with ISO27001 statutes and
other industry standards
* Mentor and train Junior colleagues
* Perform IT audits
* Liaison with other departments to deliver projects
* IT Project delivery and management
* Continuous Integration using Jenkins and GitLab
* Review security requirements and develop tests to validate the requirements
* Carry out application, network, systems and infrastructure penetration tests
* Deploy testing methodology and collect data
* Report on findings to a range of stakeholders, and client-facing activities
* Offer useful security improvements and recommendations
* Keep up to date with latest testing and ethical hacking methods
* Define test plans, security pen tests and simulated attacks on vehicle networks, firewalls,
operating systems, devices connected to the vehicle and connected car infrastructure

06/2016 - 07/2018
Information Security Services Specialist
Sabis (Bank Sabadell)

Role and Responsibilities:
* Organise periodic infosec awareness programs for non-tech personnel in line with ISO27001
statutes
* Mentor and train Junior Testers
* Perform IT audits
* Disaster Recovery Plan and Business Continuity coordination
* Implement risk assessment and controls (risk registers, risk reviews, general security controls)
* Enforce security policies in line with ISO27001, SOX and GDPR
* Incident management
* Produce technical documents for both internal and external clients
* Collaborate with Third Party insurance providers on projects
* Major Achievements: successfully delivered a new mobile banking application for a newly acquired
UK bank. I also introduced the concept of lean management to cut out waste of resources as well
as introducing an inventory system to control all digital devices of my Department, which has
helped to improve quality, productivity and efficiency.

04/2015 - 05/2016
Snr. Quality Assurance Tester
K-LAGAN Technology & Consulting Ltd

Role and Responsibilities:
* Train Junior Testers
* Compile and distribute QA Daily Reports
* Continuous Integration using Jenkins and GitLab
* Attend PBRs and Stand-up meetings
* Collaborate with Developers, Testers and Project Managers (both off-shore and on-shore) on
various projects within an Agile environment
* Major Achievements: Implemented my Lean Management skills to communicate effectively amongst team
members, improve report delivery and applied Kaizen Techniques to ensure continuous improvement.

01/2012 - 03/2015
Software Tester/Security Consultant
Optial UK Ltd

Role and Responsibilities:
* Risk assessment, controls and organising periodic infosec awareness programs
* Train ad hoc staff on the principles of Software Testing
* Draft IT Policies and review them when necessary in line with changing trends within the Infosec
domain
* Offer consultancy on how best to secure, manage and dispose information and data. E.g. scrapping
of used data drives
* Incident Management: investigate, collect and report security incidents using in-house tools.
* Research on latest infosec trends, forensic and penetration tools - Wireshark, Nmap
* Technical writing and documentation
* Continuous Integration using Jenkins and GitLab
* Employ the use of OWASP Top Ten Principles - code reviews, implementation of policies, etc.
* Attend regular infosec seminars and training in the UK and across Europe
* Engaged in the usual software duties using agile methodology to validate ERP Applications
* Major Achievement: Created the Software Testing department of the company from scratch

08/2010 - 12/2011
Software Tester
Clifford Thames Ltd

Role and Responsibilities:

* Worked with Project Managers to ensure quality development practices throughout specific projects
* Worked with Project Managers to deliver software on time, within budget and to the required
quality
* Identifying areas for process improvement - Static Testing
* Worked with Project Managers and Developers to ensure effective detection and removal of anomalies
*Major Achievement: Was part of an award-winning team that mid-wife a project for SAAB Autos

06/2008 - 12/2008
Junior Test Analyst
VP Tech & Investment Ltd

Role and Responsibilities:

Worked in a team of software testers to manually test a flight application using MS Word and Excel
to write and run series of test cases (with respect to the system's specification), and performed
automated tests on the flight application using Test Director. While working as part of a large team
of software testers, I documented test results generated from the automated and manual tests and
passed them over to the Team Lead. Due to my hard work, the application was successfully tested; its
deadline met, and was subsequently delivered to the client. Whilst working in this team, team spirit
and good rapport was created within the team.

Local Availability

Only available in these countries: United Kingdom
Profileimage by Francis Jejelowo Cybersecurity Analyst, Information Security Services Specialist, Snr. Quality Assurance Tester from London Cybersecurity Analyst, Information Security Services Specialist, Snr. Quality Assurance Tester
Register