Samuel Attuquayefio

Strategic Technology Risk Leader with 8 years of experience in cybersecurity, data governance, and AI risk management within highly regulated industries, including financial services and professional services. Proven expertise in developing and embedding enterprise-wide risk frameworks, ensuring compliance with ISO27001, Cyber Essentials, GDPR, and FCA/PRA guidelines. Skilled at leading technology change and AI oversight, providing executive-level insights, and influencing strategic decisions through robust risk reporting and governance. Recognized for excellence in stakeholder engagement, team leadership, and regulatory alignment, with a reputation for driving a strong risk culture and delivering measurable business impact.

• Certified AWS Cloud Practitioner
• Certified Cloud Security Professional
• Certified ISO 27001 Implementer
• Certified Information System Auditor (CISA)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Network Security Professional ( CNSP)

• Led a technology risk assessment for a multinational financial institution, identifying key security gaps and recommending strategic improvements that reduced risk exposure by 30%.
• Developed a control testing automation framework that reduced manual testing time by 40% and increased issue detection accuracy.
• Recognized for cross-functional leadership in delivering a major audit of cloud migration controls under tight deadlines
• Streamlined SOX compliance testing for a client, reducing audit timelines by 15% through improved audit methodologies and efficient team collaboration
• Championed a peer learning initiative that improved audit team knowledge sharing and accelerated onboarding by 50%
• Played a key role in enhancing the cybersecurity posture of a major client, helping them pass a critical ISO 27001 audit with no nonconformities
• Supported the execution of a large-scale IT audit project that met all timelines and client expectations, garnering praise from senior leadership for thoroughness and professionalism.
• Assisted in the discovery of a significant cybersecurity vulnerability in a client’s infrastructure, leading to swift corrective action and risk mitigation.
• Contributed to a team effort that successfully completed an audit engagement ahead of schedule, delivering high-quality results and enhancing client satisfaction.
• Designed and delivered IT risk training sessions for clients, improving awareness and implementation of best practices across organizations
• Reduced technology control weaknesses by 35% year-on-year through enhanced oversight and targeted remediation.
• Successfully oversaw a firmwide AI adoption programme, ensuring ethical AI usage and regulatory compliance.
• Introduced a KRIs-based prioritisation model, improving board visibility of emerging risks.
• Spearheaded adoption of a data governance framework across operations, reducing data quality errors by 28%.
• Strengthened regulatory compliance posture, enabling successful audits with no major findings
• Developed and delivered AI risk training to over 200 staff, improving awareness of ethical and operational considerations
• Improved incident reporting and response protocols, reducing critical incident handling time by 40%.
• Contributed to successful attainment of ISO27001 certification across business units.

• ISACA (Information Systems Audit and Control Association)
• (ISC)² – International Information Systems Security Certification Consortium

• Platforms: Windows, UNIX/Linux, Mainframe
• Tools: ACL, IDEA, Tableau, Power BI, Jira, ServiceNow
• Languages: Python (audit automation, data analysis), SQL
• Cloud: AWS, Azure, GCP (audit and governance)
• Frameworks: NIST, ISO, COBIT, ITIL

References available upon request.

• Banking & Financial Services – Audited core banking systems, cloud risk management, and IT governance frameworks.
• Insurance – Evaluated IT risk controls, cybersecurity resilience, and regulatory compliance.
• Retail & Commercial – Conducted IT asset audits, business continuity assessments, and ERP system reviews.
• Public Sector – Assessed IT security strategies, risk frameworks, and digital transformation initiatives.
• Pension Schemes – Reviewed IT infrastructure and security controls to ensure data integrity and compliance.

• Strong communication and stakeholder management skills, with experience in delivering reports to senior executives.
• Empathetic team player who models Group values in daily interactions.
• Adept at mentoring junior team members and leading audit engagements.
• Committed to continuous learning and creating an inclusive, growth-oriented team culture.
• Passionate about digital risk, innovation, and driving strategic technology improvement