Cyrille Kpahi

Cybersecurity consultant with 10+ years of experience, I combine two rarely found expertise: offensive penetration testing and ISO 27001/27005 governance.

My approach: go beyond the classic pentest report. Each identified vulnerability feeds a structured risk analysis process and a prioritized remediation plan, until the gaps are closed.

What I do for my clients:

Web, mobile (iOS/Android, React Native), Active Directory, and WiFi penetration tests

ISO 27001 audits and certification support

ISO 27005 risk analyses and ISMS construction

Vulnerability management with Qualys VMDR and managed remediation plans

CISO-as-a-Service missions to structure the security function

Design and delivery of cybersecurity training

My certifications: ISO 27001 Lead Implementer (PECB), ISO 27005 Risk Manager (PECB), CompTIA PenTest+, CompTIA Security+, CompTIA Server+, Cisco CCNA, Fortinet NSE. CCISO (EC-Council) in progress.

My recent references: comprehensive internal pentest program for the Caisse Nationale d'Assurance Maladie (NTLM relay remediation, LLMNR/NBT-NS, SMB signing, Log4j), React Native mobile pentest for a leading African bank, application pentest for the CEDITECH LMS platform by TransNumérik.

Who I work for: banks, insurance, public sector, telecoms, education, energy. I work 100% remotely, on a fixed-price or daily rate basis, with a possible start within two weeks.

Feel free to contact me to discuss your needs — I respond within 24 hours.