ICT Operational Risk & Compliance Specialist

CABS – Central Africa Building Society

• Led risk reviews across information security, technology operations, and emerging tech, aligning controls to NIST and ISO 27001.
• Drove improvements in change management and vendor governance; reduced audit findings through targeted remediation.
• Partnered with engineering to strengthen cloud security posture and reduce non‑production AWS costs.

Cloud Security Engineer

Old Mutual · Remote

• Led AWS security governance initiatives, improving the AWS Security Hub security score by 30% in six months.
• Managed security policy development and compliance reviews, ensuring adherence to ISO 27001, PCI-DSS, and NIST security frameworks.
• Conducted security risk assessments and developed a dynamic risk register, improving threat mitigation efficiency.
• Developed and automated threat intelligence scripts to detect malicious open-directory domains in newly registered domains.
• Collaborated with security auditors and compliance teams to remediate security gaps and strengthen cloud security controls.
• Designed and maintained security dashboards using Power BI, providing executive teams with real-time insights into security operations.

Cyber Security Engineer

CABS – Central Africa Building Society

• Implemented security awareness training programs, reducing risk-prone behaviour among employees by 20%.
• Led the deployment of advanced threat protection solutions, increasing threat detection capabilities by 40%.
• Conducted penetration testing and vulnerability management, ensuring compliance with RBZ security standards and industry frameworks.
• Developed incident response plans and forensic analysis workflows, reducing incident response times by 80%.
• Optimized security operations through cost optimization strategies using Terraform, reducing daily operational costs by 3.5%.

IT Support

Proplastics

• Provided technical support for IT systems and network security, ensuring minimal disruptions to business operations.
• Drove improvements in change management and vendor governance; reduced audit findings through targeted remediation.
• Developed clear documentation for IT governance and compliance, enhancing policy implementation across teams.