MURITALA OSHIAFI

Recent BSc (Hons) Cyber Security and Digital Forensics graduate from the University of the West of England with practical academic experience in information security governance, risk management, and compliance. Built a full ISO 27005-aligned Risk Register during coursework, mapping threats, likelihood/impact, and controls for a medical-device manufacturer, and researched cybersecurity risk and mitigation frameworks (including NIST and ISO 27001 principles) for a final-year project on digital healthcare. Strong attention to detail, structured documentation skills, and ability to communicate technical findings clearly to both specialist and non-specialist audiences. Seeking an entry-level Cyber Security Analyst role focused on GRC, audit readiness, and ISMS support, with a genuine interest in developing further towards CompTIA Security+ and ISC Certified in Cyber-Security (CC).

Final-Year Project Researcher - Cyber Security & Cybercrime in Digital Healthcare

University of the West of England, Bristol, UK - Sep 2025 - May 2026

• Investigated how ransomware, phishing, and insecure medical technologies are exploited to compromise patient data and clinical systems, mapping each attack vector to its likely entry point and impact.
• Classified over a dozen real-world healthcare cyber incidents by attack type and severity, drawing on academic literature, case studies, and industry reports to identify recurring patterns and gaps in existing defences.
• Cross-checked findings against recognised security frameworks (including NIST and ISO 27001 principles) to produce a structured report with practical, prioritised mitigation recommendations.
• Delivered findings through a written report and an oral presentation, translating technical detail into plain-language conclusions for a non-specialist assessment panel.

Security Management Coursework - ISO 27005 Aligned Risk Register 

University of the West of England, Bristol, UK - 2026

• Built a structured Risk Register for a medical-device manufacturer using ISO 27005 methodology aligned with the ISO 27001 ISMS framework and ISO 14971 medical-device risk management principles.
• Identified major threats, including cyberattacks, insider threats, and compliance failures, and assessed each using a qualitative likelihood x impact risk matrix.
• Mapped specific security controls to each identified risk, explaining business impact and how controls reduced residual risk to acceptable levels.
• Produced a Statement of Applicability-style mapping of controls to ISO 27001 requirements, translating technical risk findings into clear, presentation-ready material for a mixed audience.

Genuine interest in the internet, cybercrime prevention, and online safety, supported by academic research into real-world attack methods and mitigation strategies. Comfortable working flexible hours, including occasional evening or weekend rota shifts, and confident in handling incoming calls and enquiries professionally. Comfortable working collaboratively across technical and non-technical teams, with a strong interest in developing enterprise IT and ISMS experience within a permanent, structured security function.