Mikhail Mugotitsa Ceh,Ecih,Gicsp,Edrp,Cipm,Crisc,Cciso Email & Phone Number

Nairobi County, Kenya

Https://Cert.Eccouncil.Org/Ecih-Scheme-Committee.Html

Nairobi, Kenya

Responsible for establishing and maintaining the enterprise information security vision, mission, strategy, and program to ensure information assets are adequately protected. Responsible for compliance, accountability and the alignment of information security and data privacy programs with the organizational strategy. Responsible for security & privacy by design in product development, security & privacy by default in products and services and security & privacy-related awareness and training.Oversee the design and implementation of privacy controls, the performance of privacy impact assessments, privacy-related investigations, privacy audits and privacy monitoring.Develop a holistic organizational information security culture that is alert to information security risks and a consistent approach to the application of value-based mitigation measures and controls. Information security awareness training to help mitigate insider threats, understand supply chain risks and ensure all staff understands the issues and their responsibilities.Ensure continuity and/or rapid recovery of business operations in the event of a system failure, information security incident, or disaster through incident response planning and business continuity management. ISMS Leader, Business Continuity Planning & Disaster Recover Chairperson and Data protection officer designation in line with the Data Protection Act 2019.ICT Cybersecurity Mainstreaming in the energy sector of Kenya. Leading engineering unit/division DevOps and managing ICT projects within the planned time deadlines and budget projections – triple constraints.(Lean & Agile principles – Scrum & XP and Critical Path Method using Jira, Trello)

Nairobi

ICT Cybersecurity Mainstreaming in the energy sector of Kenya. Led compliance management programs (ISO 27001, 27002, 27701, 22301, 9001, NIST & CIS) and provided security expertise and guidance to development teams, stakeholders, and management.Ensured continuity and/or rapid recovery of business operations upon system failure, information security incident, or disaster through incident response management and business continuity management.Designed and delivered security awareness training programs for employees, customers, or stakeholders.Implemented vulnerability, patch and configuration management.Conducted security assessments, vulnerability scans, quality assurance and penetration tests to identify risks and vulnerabilities.Facilitated purple team activities to identify gaps in security controls, validate the effectiveness of defense mechanisms, and improve ability to prevent, detect, and respond to cyber threats.

Nairobi Kenya

Implemented compliance management programs (ISO 27001, 27002, 22301, 27701, PCI-DSS, SOC 2 & VISA PIN Security) and provided security expertise and guidance to development teams, stakeholders, and management.Led incident response efforts, investigated security incidents, and implemented remediation measures to minimize the impact and future recurrence.Drove vendor and third-party risk management by establishing a vendor risk management framework and conducting regular reviews to ensure compliance.Conducted assessments and due diligence on vendors & third-party infrastructure and contacts to evaluate their security practices and controls.Conducted security assessments, vulnerability scans, quality assurance and penetration tests to identify risks and vulnerabilities.Collaborated with cross-functional teams to integrate security into the software development lifecycle.(Agile, DevSecOps)MDM, DLP, SIEM and Enterprise Security solutions administration (elienvault, logrhythm, splunk, solarwinds, firewall, AD & Jumpcloud directory services) automation and configuration management (Chef, Python) for BCM.Designed and delivered security awareness training programs for employees, customers, or stakeholders (workshops, presentations and Moodle LMS).

Nairobi Kenya

Monitored security alerts and incidents, investigated security breaches, and recommended and implement remediation measures.Worked closely with customers, providing security expertise, guidance, and assistance in addressing security concerns or requirements.Participated in the evaluation and implementation of security tools, technologies, and processes to enhance the effectiveness and efficiency of security operations.Conducted system acceptance tests (SATs) and user acceptance tests (UATs) for payment systems & ATM deployments, ensuring compliance with standards.Maintained accurate and up-to-date documentation of network, systems & security administration standard operating procedures, policies & standards.Contributed to the implementation of ISO 27001, ISO 22301, SOC 2, Quality Management System (QMS), and Payment Card Industry Data Security Standard (PCI/DSS) to ensure compliance, enhance security measures and improvementsMaintain optimal network performance, infrastructure provisioning, and configuring ATMs on Postilion and IST switch, routing and Switching of IP Data networks- OSPF, EIGRP, RIP, and BGP routing protocols. Perform periodic Disaster Recovery Testing to ensure business continuity and continuous improvement of the DRP.

Kenya

Demonstrate commitment to and promotion of a culture of service excellence and continual improvement within the IT Department, and provide professional, courteous, and rapid responses to all stakeholders.Provide the first point of contact for IT Support and troubleshooting of technical issues for Global World Networks customers, covering all PC hardware, software, smartphones, and tablets, as well as any associated peripherals.Install, automate configuration management and maintain equipment to standards determined by the IT Director, by performing upgrades, new installations, and carrying out routine procedures.Manage service desk tickets, planning and prioritizing systematically to minimize backlog and ensure operational efficiency.

Kenya

Design and develop appropriate computer instructional material.Initiate and implement systems, procedures and other student management issues.Teach students and learners to use computers and conduct group training sessions.Determine and troubleshoot technology services for staff.