Cephas J. Email & Phone Number

Africa

- Run privacy bootcamps focused on operational practice; technical privacy; and strategic implementation of data protection, for a new breed of privacy workers, to help them apply privacy knowhow and create value in an organizations from week one.- Host a quarterly privacy operations conference with the standing theme of “doing privacy - exploring functions, methodologies and frameworks, technical privacy, practical practices and privacy tech. Tapping into tribal knowledge, lived experiences, learned wisdom and best practices.- Undertake privacy and security awareness for hundreds of non-technical and technical persons enhancing workforce and citizenry privacy and security savvy-ness.- Led strategic visioning for Cyber In Africa, from conception as @CyberSpeak LC, through vision CiA 2.0

- Assisted clients across banking, fintech, aviation, non-profit, cooperative sectors,with implementation and management of BAU operational activities, including:gap & readiness analysis; vendor privacy assessments; embedding privacy-by-designprinciples and culture; technical privacy reviews and compliance audits; and rigorousstakeholders’ training. Covering 20+ gap assessments; 30+ RoPAs; 40+ DPIAs; 4 privacy audits; 50+ vendor privacy profiling; 20+ stakeholders’ trainings and more.- Led technical privacy work in client's projects covering: developing privacy controls libraries; assessing privacy-by-design mechanisms; doing privacy reviews to validate technical privacy controls; and defining technical privacy requirements.- Advised on nurturing and monitoring privacy culture by considering human behavior factors.- Helped clients to understand, own and manage privacy risk; operationalize a modernand pragmatic privacy program; adapt the program within organizational constraints, tomeet privacy obligations, support overarching business objectives and strengthen thetrust and confidence of clients’ brand, making privacy a key differentiator.- Conducted data protection audit that helped a Bank understand it’s privacy maturityand assure ongoing compliance to the Office of the Data Protection Commissioner(ODPC)

Nairobi, Kenya

- Assisting clients across banking, fintech, non-profit, retail-tech, and other verticals with implementation and management of BAU operational activities, including: data mapping, DPIAs, customer due diligence requests, DSAR responses, vendor privacy assessments, embedding privacy-by-design principles and culture, and technical privacy reviews and compliance audits; and rigorous stakeholders’ training. Covering 10+ gap assessments; 40+ RoPAs; 25+ DPIAs; 4 privacy audits; 10+ vendor privacy assessments; 20+ stakeholders’ training and more.- Helping clients to understand, own and manage privacy risk; operationalize a modern and pragmatic privacy program; adapt the program within organizational constraints, to meet privacy obligations, support overarching business objectives and strengthen the trust and confidence of clients’ brand, making privacy a key differentiator.- Collaborate with relevant stakeholder teams (Risk, Business Operations, etc.) to collate and analyze metrics for reporting privacy KPIs and trends.- Lead technical privacy work in client's projects covering: developing privacy controlslibraries; assessing privacy-by-design mechanisms; doing privacy reviews to validate technical privacy controls; defining technical privacy requirements; advising on privacyenhancing and preserving technologies; and advising on nurturing and measuringprivacy culture.- Performing vulnerability management to identify, analyze, remediate vulnerabilities using patches and compensating controls to fulfill ISO 27001, SOC 2 and PCI DSS security compliance requirements.- Perform security audits and testing in risk reduction and PenTest exercises to determine security risks and recommend mitigations for significant risk deduction and process improvement.

- Implemented and and provide support data security and privacy solutions for clients including DLPs, access controls, monitoring, endpoint protection etc- Conducting vulnerability assessment to remediate vulnerabilities using patches and compensating controls for security compliance and audits using Qualys VMDR.- Conducted requirement elicitation, system analysis and translating business needs into functional and tangible solutions specifications- Perform security audits via pen-testing exercises to facilitate risk reduction

Nairobi, Kenya

⦁ Developed digital security and online privacy modules for awareness training ⦁ Planned and delivered digital security workshops for non-profits and interest groups.

Nairobi,Kenya.

⦁ Underwent coaching in acclaimed the 7 Habits of Highly Effective People by Franklin Covey to build self-leadership; values framework; paradigm shifts; life principles; and higher thinking. ⦁ Participated in design thinking exercises to understand problem situations; identify problems; build hypotheses; research and understand the problem; discover root causes; conceptualize then craft possible solutions⦁ Learnt transformational organizational leadership through collaborative leadership and sharing fire.⦁ Trained on effective communication by the Creator of The CASE Method® for Sustainable Leadership and effective decision making.