Summary
Overview
Work History
Education
Skills
Work Preference
Timeline
Generic
Open To Work

ADDAI RICHMOND

Accra

Summary

Governance, Risk, and Compliance (GRC) Analyst and IT Auditor with 3 years of experience supporting enterprise risk management, regulatory compliance, and cybersecurity governance initiatives. Proven expertise in ISO 27001, NIST 80053, COBIT, SOX, and third-party risk management.

Overview

8
8
years of professional experience

Work History

Compliance and Security Analyst

KPMG
06.2021 - Current
  • Performed IT audits and tested IT General Controls to ensure compliance with regulatory standards
  • Conducted enterprise risk assessments aligning with ISO 27001, NIST 800-53, and COBIT to identify potential vulnerabilities
  • Conducted vendor risk assessments to evaluate and mitigate third-party risks
  • Developed risk registers and remediation tracking dashboards
  • Managed ServiceNow, RSA Archer, and AuditBoard platforms to streamline processes.

Internal IT Auditor

Infosec Consulting International
09.2018 - 05.2021
  • Evaluated IT General Controls to ensure effectiveness and enhance security
  • Assessed compliance with ISO 27001, NIST, COBIT
  • Conducted internal IT audits to assess compliance and pinpoint risks
  • Compiled audit reports and provided actionable recommendations

Education

Diploma - Cybersecurity GRC and IT Audit

YesYouCan Cybersecure LLC
USA DALLAS -TEXAS
11-2025

Skills

  • Risk assessment
  • Regulatory compliance
  • Compliance evaluation
  • IT audits
  • Vulnerability management
  • Incident response
  • Security frameworks
  • ServiceNow administration
  • Problem solving
  • Attention to detail
  • Team collaboration
  • Report writing
  • Communication skills
  • Data analysis
  • Process improvement
  • Vendor assessments
  • Regulatory analysis
  • IT compliance
  • Internal auditing
  • Cloud security
  • Cryptography
  • Security policy development
  • Security information and event management
  • Qualys cloud platform
  • Business continuity planning
  • Reporting and documentation
  • Intrusion detection
  • Identity and Access management
  • Data loss prevention
  • Network security
  • Endpoint security
  • Protecting networks
  • Resource allocation
  • Malware analysis
  • Risk mitigation
  • Security awareness training
  • Application security
  • Multitasking Abilities
  • Disaster recovery
  • Decision-making
  • Relationship building
  • Information protection
  • Business continuity
  • Time management
  • Written communication

Work Preference

Job Search Status

Open to work

Work Type

Full TimePart TimeContract WorkGig Work

Location Preference

Remote

Salary Range

$1/hr - $195000/hr

Timeline

Compliance and Security Analyst

KPMG
06.2021 - Current

Internal IT Auditor

Infosec Consulting International
09.2018 - 05.2021

Diploma - Cybersecurity GRC and IT Audit

YesYouCan Cybersecure LLC
ADDAI RICHMOND