Ashton Chiruka Email & Phone Number

Lancaster, Gb

Implementation of the following standards:1. Information Security Management System (ISMS) based on ISO 27001:2013 and ISO 27001:20222. Business Continuity Management System (BCMS) based on ISO 22301:20193. Privacy Information Management System (PIMS) based on the requirements of ISO 27701:20194. Compliance Management System (CMS) based on the requirements of ISO 373015. Development of ISO Documents: - Strategies, policies, procedures, processes, activities aligned to the requirements of ISO 27001, ISO 22301, ISO 27701 & ISO 37301.6. Auditing of ISO 27001, ISO 22301, ISO 27701 & ISO 37301.7. Performing ISO 27001, ISO 22301, ISO 27701 & ISO 37301 Gap Analysis, design and implementation of controls.8. Assisting organizations with all phases of Plan, Do, Check and Act.9. Leading and facilitating Information Security Risk Assessments.Vulnerability Assessment and Penetration TestingVulnerability AssessmentsExternal and Internal Penetration TestingApplication Penetration covering (Web Application PT, Mobile Application)Social Engineering Penetration TestingOperating Systems Penetration Testing including Advanced Windows HackingTraining in Ethical Hacking, Cybersecurity Awareness etc

Established the first ISO 27001-compliant Information Security Management System (ISMS) for a leading financial institution in Zimbabwe (EcoCash Holdings). Led a team of 19 cybersecurity professionals to design and implement the ISMS framework, policies, and controls, ensuring the confidentiality, integrity, and availability of critical information assets.Collaborated with the technical team to develop a disaster recovery plan (DRP) that outlined the steps and procedures for restoring IT systems and infrastructure in the event of a disruption or disaster. The DRP included detailed recovery strategies, such as backup and restoration processes, alternative infrastructure options, and data recovery procedures.As a result of these efforts, achieved ISO 27001 certification within 8 months, demonstrating compliance with international information security standards and instilling confidence among stakeholders. Reduced the average time to detect and respond to security incidents by 60%, enhancing the organization's ability to mitigate security risks and minimize downtime.

Specialties• IT governance (Enterprise Governance of IT) advisory and assurance• IT Strategy• IT Risk identification, review and evaluation, risk response monitoring and reporting.• Business IT alignment• Business IT value creation• IT auditing• IT Infrastructure and General Controls• Application control reviews• Enterprise risk management• IT projects advisory and assurance• Vulnerability assessments and penetration testing• Information security reviews• Business continuity and disaster recovery• Business IT integrated audits

Harare, Zimbabwe