Faatimah Naujeer
Vacoas,Mauritius
Summary
Results-driven Group Cybersecurity & IT GRC Analyst experienced in SOC operations alignment, PCI DSS implementation, vulnerability management, and IAM governance across six countries. Delivered effective risk assessments and threat monitoring through advanced XDR/VMDR toolsets, while enforcing security baselines for application onboarding and translating technical controls into executive insights via KRI dashboards. Contributed to strategic security projects and compliance initiatives, partnering with application owners to ensure secure onboarding processes and maintaining access rights matrices.
Overview
1
1
Certification
7
7
years of post-secondary education
5
5
years of professional experience
Work History
Group Cybersecurity and IT GRC Analyst
First Capital Shared Services Ltd (FCSSL)
04.2025 - Current
- Led PCI DSS implementation through ASV scanning and Card Data Discovery exercises. Contributed to SOC integration initiatives and coordinated VAPT exercises, enhancing governance and compliance. Monitored alerts across Taegis XDR, Qualys VMDR, and Trend Micro to ensure continuous security vigilance.
- Developed and maintained monthly Key Risk Indicator (KRI) dashboards and executive reporting to provide insights for informed decision-making. Conducted risk assessments for sensitive access exceptions (USB policies, URL whitelisting) and performed compliance audits on servers and endpoints against security baselines.
- Partnered with application owners to evaluate architectures against IAM/GRC prerequisites, enforcing server hardening, patch validation, and compliance checks prior to production release to mitigate security risks.
Identity Access Management Admin Officer
First Capital Shared Services Ltd (FCSSL)
10.2023 - 04.2025
- Managed Access Rights Matrix (ARM) and coordinated access recertification reviews to ensure compliance and security.
- Executed UAM verification (privilege restrictions, maker-checker functionality, compliance reporting) during application onboarding to enhance security posture.
- Enforced MDM and Hybrid Azure standards to ensure compliance with organizational policies.
- Led the team, managing escalations and ensuring SLA compliance.
- Security Awareness & Culture Initiatives Authored and delivered annual cybersecurity training modules. Facilitated new joiner induction sessions. Managed phishing simulation campaigns and tracked susceptibility metrics.
Identity Access Management Admin
First Capital Shared Services Ltd (FCSSL)
10.2021 - 10.2023
- Oversaw identity lifecycle operations, ensuring effective provisioning, role assignments, and de-provisioning to maintain security compliance.
- Completed day-to-day duties accurately and efficiently.
- Contributed innovative ideas and solutions to enhance team performance and outcomes.
- Worked successfully with a diverse group of coworkers to accomplish goals and address issues related to our products and services.
Education
(Bsc) Hons - Emerging Technologies (Top-Up)
University of Technology
Mauritius 01.2022 - 12.2023
Diploma - Information
MITD SITEC
Ebene 05.2018 - 12.2021
National Certificate Level 4 & 5 -
MITD SITED
Ebene 05.2016 - 04.2018
Skills
- PCI DSS Implementation
- Risk Management: KRI Dashboards, Risk Assessments, Policy Audits, PCI DSS Controls
- IT Risk Assessments
- Security Baselines & Hardening
- Policy Compliance
- GRC management
- GRC reporting
- User Access Management (UAM)
- Role-Based Access Control (RBAC)
- Access Rights Matrix (ARM)
- Access management
- Access recertification
- Segregation of Duties (SoD)
- SOC Incident Alignment
- VAPT Lifecycle Coordination
- Vulnerability management
- Vulnerability scanning
- Vulnerability Remediation Tracking
- Phishing Simulation Programs
- Security Awareness & Culture: Phishing Simulation Programs, Cybersecurity Awareness, New Hire Inductions
- Continuous Monitoring: Taegis XDR, Qualys VMDR, Trend Micro
- Endpoint & Server Compliance Checks
- ASV External Scanning
- SIEM monitoring
- Threat monitoring
- KRI Dashboards
- Risk Management: KRI Dashboards, Risk Assessments, Policy Audits, PCI DSS Controls
- GRC reporting
- Risk assessment
- PCI DSS
- Access recertification
Certification
CompTIA Security+ (In Progress)
Timeline
Group Cybersecurity and IT GRC Analyst
First Capital Shared Services Ltd (FCSSL)
04.2025 - Current
Identity Access Management Admin Officer
First Capital Shared Services Ltd (FCSSL)
10.2023 - 04.2025
(Bsc) Hons - Emerging Technologies (Top-Up)
University of Technology
01.2022 - 12.2023
Identity Access Management Admin
First Capital Shared Services Ltd (FCSSL)
10.2021 - 10.2023
Diploma - Information
MITD SITEC
05.2018 - 12.2021
National Certificate Level 4 & 5 -
MITD SITED
05.2016 - 04.2018