Nkiruka Joy Aimienoho

Regional Cybersecurity and Risk Leadership across Nigeria, Botswana, Côte d’Ivoire, Mauritius, and Zambia. 🔘 Regulatory and Stakeholder Engagement: Spearhead collaborations with regulators and key stakeholders to align market-specific security strategies with compliance and operational goals. 🔘 Risk Reduction: Drive improvements in risk profiles across business functions and markets—achieving measurable reductions in vulnerabilities and aligning outcomes with organizational objectives. 🔘Security Culture and Awareness: Develop and deliver market-specific security scorecards while fostering a robust security awareness culture among teams. 🔘 Incident Management: Oversee timely incident response and streamline processes to minimize impact and enhance operational resilience. 🔘 Technical Enablement: Partner with technology teams to ensure clear understanding and adherence to security requirements, processes, and hygiene for key controls, including vulnerability management and identity and access management (IAM).

Progressing onboarding formalities

Invited to serve as an Advisory Board Member, providing strategic guidance and expert insights for the 2024 and 2025 ThinkNovation Cybersecurity Conference—a premier industry event hosted by the Financial Institutions Training Center (FITC) that serves the Nigerian financial services sector.

Technology Advisory Services | Cybersecurity Leader (also leading Privacy, Resilience, & IT GRC services) As a Cybersecurity Leader at PwC, I directed strategic engagements that position PwC as a trusted partner to boards, government entities, and leaders, aligning with the firm's overarching business goals. Some of my key contributions include: 🔘Led cross-functional teams to execute PwC's strategy, advancing clients' Cybersecurity and Privacy programs from inception to implementation. 🔘Orchestrated compliance initiatives, including Nigeria Data Protection Regulation, CBN IT Standards Blueprint, and Risk-Based Cybersecurity Framework, among others. 🔘 Spearheaded CISO Services for diverse brands and driving critical projects such as Incident Response, Ransomware Readiness, and Recovery advisory. 🔘Pioneered a talent-focused team that garnered the prestigious PwC RAS Team of the Year award. 🔘Amplified the PwC Cybersecurity brand across Africa as a representative in multiple fora, contributing thought leadership, articles, and industry presentations. 🔘Led the Cyber, Privacy & Resilience Academy: Facilitated Cybersecurity and Resilience training for board members, C-suite executives, CISOs, journalists, SMEs, women in leadership, tech and audit professionals. 🔘Honored for the following recognitions including the EC Council Top 50 C|CISO Hall of Fame, being shortlisted for Cybersecurity Woman of the Year, receiving the Excellence Award for Cybersecurity Governance, Young CISO Awards, and recognition as one of Africa's 8 Women in Cybersecurity. 🔘 Contributed my expertise through speaking engagements at industry events such as ISACA, ISC2, Institute of Directors (IOD), ACAEBIN, WiCyS, FITC, Naijasecforce, Cybersafe foundation, Signal Alliance, and more.

Risk Assurance Services | Cybersecurity Leader (also spearheading Privacy, Resilience, & IT GRC services). I collaborated with leaders to drive impactful cybersecurity initiatives, as well as Privacy, Resilience, IT Governance, and Compliance services. Key contributions and responsibilities included: 🔘 Strategic Leadership: I played a pivotal role in shaping practice strategy, expanding market presence, and successfully managing complex projects. I monitored KPIs, budgets, and nurtured team growth, ensuring our team's continued success. 🔘 Client Security Assurance: I led teams that meticulously managed, documented, and communicated security findings, vulnerabilities, and exceptions. This proactive approach fostered strong client relationships and ensured a thorough understanding of their security needs. 🔘 Industry Influence: I authored thought leadership pieces, represented PwC in various forums, and actively promoted Cyber Security's role in core business processes. I also played a key role in educating client teams and raising awareness. 🔘 Board-Level Advisory: I provided board-level advisory services, prescribing security enhancements that aligned with stakeholder and regulatory mandates. This strategic guidance was crucial for our clients' overall security posture. 🔘 CISO Services: I spearheaded successful CISO services, strengthening organizations' information security leadership, and enabling them to proactively address security challenges. 🔘 Features and Recognitions: My contributions were recognized in the industry: - 2020 IFSEC Global Influencer (#7 in Cybersecurity professionals & thought leaders) - Top 50 Women in Cybersecurity Africa, 2020 - Cybersecurity Women Champion Awar Ed - Epic Women in Cyber, 2020 🔘 Speakership: I shared my expertise and insights through speaking engagements at various industry events, including ISACA UK, NaijaSecCon, SheLeadsTech, CSEAN, SheSecures, CyberinAfrica, CISO Alliances, and more.

Digital Jewels Africa (formerly Digital Jewels Limited) is a leading Cybersecurity, IT Governance, Risk, and Compliance (GRC) Consulting and Capacity Building Firm. During my time at the company, I had the privilege of making significant contributions, including: 🔘 Information/Cyber Security Workforce Leadership: I led the largest workforce in the consulting practice, overseeing the successful execution of over 50 Information/Cyber Security, Governance, Risk, and Compliance engagements in eight years. These efforts helped clients enhance their security and resilience. 🔘 Cybersecurity Risk and Governance Leadership: Spearheading initiatives, I collaborated with departmental heads across diverse projects, crafting cyber risk registers for each business unit. This involved seamlessly integrating cybersecurity considerations into key projects and operations. Working with the CISO and leadership, we established an aggregated active cyber risk profile, expediting risk mitigation and enhancing regulatory compliance. 🔘 Enterprise-Wide Implementations: I spearheaded the implementation and maintenance of ISO 27001 (Information Security), ISO 22301 (Business Continuity), OHSAS 18001 (Occupational Health and Safety), and worked collaboratively with technical and other standards team leaders to deliver services such as VAPT, PCI DSS, ISO 9001 (Quality Management), and ISO 20000 (IT Service Management). 🔘 Business Growth: I played a pivotal role in growing the portfolio to seven figures and sustained profitability through various business development initiatives. Notably, I drove a remarkable 122.8% revenue increase in 2017. 🔘 Capacity Building: As an accredited PECB corporate instructor, I successfully facilitated certification courses with a minimum pass rate of 92%. I also contributed to capacity-building efforts in several resilience disciplines, including business continuity, crisis management, technical disaster recovery, cybersecurity, and risk management.

🔘 Information Security and Business Continuity Project Delivery: Successfully executed multiple Information Security projects in the early stages of my career, significantly improving security measures and addressing identified security and business continuity gaps. 🔘 Training and Compliance Leadership: Developed and delivered tailored training courses to over 500 executives and staff. Empowered them with the knowledge and skills essential for achieving organizational security compliance goals and meeting regulatory requirements. 🔘 Capacity Building Collaboration: Partnered with teams to implement a comprehensive cyber cultural uplift program. This initiative included the establishment of business-embedded cybersecurity champions, creation of an extensive risk and treatment registers, conducting crisis simulations, and providing targeted training for high-risk groups. 🔘 Certifications and IT GRC Compliance Achievements: Played a key role in establishing information security, business continuity, and IT service management programs. Successfully obtained ISO 20000, PCI DSS, ISO 27001, and ISO 22301 certifications, ensuring compliance for large corporations.

🔘 ISO 27001 Certification: I played the role of - Information security manager, through collaborative efforts with staff and leaders helped me optimize the operation and maintenance of the Information Security Management System based on ISO/IEC 27000 series standards. I played a pivotal role in aiding the transition certification to ISO 27001:2013, making our firm the 1st indigenous professional services firm in Africa to be accredited to this standard. 🔘 Information Security Management: I spearheaded information security management activities by offering internal management consultancy advice and practical assistance on information security risk and control matters. 🔘 Project Delivery: I worked on the successful delivery of six projects for large corporates, including a leading bank, leading to their certification to ISO 20000 (the first in Nigeria), PCI DSS, ISO 27001, BS 25999, and ISO 22301.

I worked as a Service Desk Support Engineer at MTN Nigeria, where I played a crucial role in supporting the organization's information systems. Key achievements from this role include: 🔘 Project Delivery: Working in teams, I supported the successful implementation of major IT projects such as the Vista Roll-out, Windows 7 Upgrade, Remedy Upgrade, and Siebel CRM, and several others which were driven with support from the service desk. 🔘 User Support: Provided comprehensive support to over 800 users, ensuring operational efficiency, addressing risks, and improving service levels across the organization. 🔘 Recognition: Received the CIO Award, alongside team members, in recognition of our commitment to excellent customer service at the time, which resulted in a significant reduction in service-related issues.

Cybersecurity: Managing Risk in the Information Age. This program provided a comprehensive understanding of how to lead the strategic response to cyber risk management.

The Cyber Leadership Program (CLP) is an advanced, executive-level program for cyber professionals to develop their executive skills, c-suite stakeholder and board engagement, and become leading tech executives ( chief information security officers).

Study included - Information Systems, Digital Innovation, Project Management, Leadership and Skills: Planning and Control, Strategic International Business Management.

Program focused on the strategic, management, and organizational approaches to Cybersecurity.

Leadership in Crises: Preparation and Performance. This program helps fortify crisis management skills to help Organizations successfully manage, survive, and recover from the unexpected such as - Cyberattacks, Major technology breaches, Infrastructure failures, Public health emergencies, Natural disasters, Terrorist attacks.