Recruiter Snapshot
Godwin Oiku
Vulnerability Management & Project Management Professional
Cybersecurity Engineer | GRC & IT Risk | IAM | PMP | CySA+ | Security+ | Founder, AuditVanguard
Open to Senior Vulnerability Management, Security Program/Project Management, IAM, GRC, and IT Risk roles. Hybrid or remote, US-based.
Most breaches don’t come from unknown threats—they come from known weaknesses nobody owned, prioritized, or finished fixing. I specialize in vulnerability management and the project discipline that drives remediation to verified closure. With 12+ years in cybersecurity, I’ve run scanning, prioritization, and remediation programs across financial services, healthcare, semiconductor manufacturing, and enterprise technology; as a PMP and SAFe-certified leader I coordinate security, engineering, and business teams so critical fixes ship on time—cutting residual risk by 45% and repeat audit exceptions by ~40%. My career started in IAM (Active Directory, RBAC, least privilege, access certifications, JML), which still shapes how I run remediation today. Vulnerability management is one piece of a broader practice spanning risk assessments, audit readiness, and frameworks such as NIST, ISO 27001, SOC 2, HIPAA, PCI DSS, and CMMC; more recently I’ve expanded into AI risk and security (NIST AI RMF, ISO/IEC 42001). Founder of AuditVanguard, a platform that automates SOC 2 and ISO 27001 evidence mapping, cutting manual evidence collection and shortening audit prep for GRC consultants. 12+ years of experience since 2014, from system administration through senior cybersecurity engineering and GRC.
Key metrics
Vulnerability management, security project delivery, IAM, and GRC across regulated industries.
Financial services · Semiconductor · Enterprise tech
Residual-risk reduction through prioritized vulnerability remediation roadmaps aligned to NIST CSF and ISO 27001.
Visa Inc. · 2020 – 2023
Faster incident recovery after project-managing the IR runbook rebuild — delivered on schedule.
Infineon · 2023 – 2025
Skills & toolbelt
Experience
Own vulnerability remediation tracking and control testing using Rapid7 InsightVM, Qualys, Nessus, and Tenable.io, and manage audit evidence for control reviews. Built IAM and access governance workflows that closed a recurring audit finding.
Led the incident response runbook rebuild and on-call handoff, cutting recovery time by about 40%. Ran vulnerability scanning and remediation tracking with Rapid7 InsightVM, Qualys, Nessus, and Tenable.io, and served as control owner during audit and governance reviews.
Built risk-based vulnerability remediation roadmaps aligned to NIST CSF, NIST 800-53, ISO 27001, SOC 2, and CIS, cutting residual risk by 45%. Ran enterprise risk assessments and audit liaison work, reducing repeat audit findings by about 40% year over year.
Implemented least-privilege and RBAC models and remediated excessive permissions and orphaned accounts, reducing access-related audit findings.
Delivered enterprise IT security support and maintained patch, backup, and incident records that supported audit readiness.
Administered Active Directory accounts, provided Tier 2 troubleshooting, and supported patching, backups, and system documentation.
Certifications
- PMP — Project Management ProfessionalActive
- CompTIA CySA+Active
- CompTIA Security+Active
- Certified SAFe 6 Scrum MasterActive
- Cisco CCNAActive
- Oracle OCAActive
- CISMIn Progress
- CISA — Certified Information Systems AuditorIn Progress
Education
- B.Sc., Computer Science — University of Port Harcourt · 2005 – 2010
- Network Series Certification — Austin Community College · 2017 – 2018
Flagship build
AuditVanguard — founder-built AI-native GRC & AIMS SaaS. SOC 2, ISO 27001, ISO/IEC 42001, HIPAA, PCI DSS engagements with multi-tenant IAM designed end-to-end. auditvanguard.com