Stephen Muasya- Msc, Cisa®,Cscso® Email & Phone Number

Kenya

The ISACA Foundation (previously known as One In Tech) issues global academic scholarships to provide funding and career-building resources for students pursuing cyber-related degrees. This scholarship program was honored with a 2023 Power of Associations Gold Award from the American Society of Association Executives (ASAE) for our work bridging the.

The Governance of Enterprise Information & Technology Advisory Group will partner with ISACA Global to identify industry trends and support activities required to appropriately create the necessary information and governance content to develop products in support of ISACA’s constituents. New product ideas will be discussed, and products will be prioritized.

Kenya

Global

✅Coordinate the development of best practice policies and standards based on various governance frameworks✅Getting Organization ready for Internal and External Systems/ Technology Audits✅Ensure all IT controls are documented and assigned control owners to establish accountability.✅Ensure that risk factors and events are addressed in a cost-effective manner.

Kenya || Nigeria || UAE || UK

• I was Responsible for:✅ ISO 27001, CIS, PCI DSS, SOC 1/2 Implementation
• Supported 100% -the implementation of ISO 27001 Information Security Management System (ISMS) program and relevant certifications.
• Collaborated with cross-functional teams to establish and maintain security policies, procedures, and controls leading to 100% implementation and compliance.✅Internal IT Audits:
• Planned, executed, and managed 5+ plus Periodic Cyber Security and Information Systems audits to assess compliance with NIST SP-800-53, ISO 27001 standards, CIS v8 and other relevant standards.
• Identified over 50+ areas of improvement and provided recommendations for enhancing security and compliance measures.✅Compliance Standards and Assessments
• Stay current on industry-specific compliance standards such as SOC 2, ISO 27001, CIS V8 and NIST, and others applicable to the organization.

Nairobi, Kenya

Special Contributions✅ Elevated overall security posture by 35% by leading the development and implementation of a comprehensive security program, including policies, standards, procedures, and awareness training, resulting in improved risk management and reduced security incidents.✅ Ensured 100% compliance with regulatory requirements (e.g., GDPR, HIPAA).

||Kenya||

✅ Evaluated Information Technology controls for all operating systems, applications, database management system interfaces, and networks across the Bank to ensure consistency in achieving compliance requirements (regulatory, standards, and internal policies).✅ Promoted Information security awareness within the Bank on weekly basis by providing.

||Kenya||

Key Responsibilities:✅ Developed and maintained a formalized GRC framework, utilizing standards-based controls aligned to business-specific threats.✅ Assessed, prioritized and updated existing IT security policies and standards to reflect the compliance framework.(ISO 27001/2, COSO,COBIT,SOC 2 and PCI DSS )✅ Performed risk assessment of new IT projects.

Nairobi County, Kenya

✅Developed 150+plus user stories and to-be process flows to support the design and development of Cloud sales solutions for the Credit and Business Development Teams across the entire bank. ✅Worked collaboratively with team (UI/UX) Design members to design over 50 solutions and products that met clients’ business requirements and fulfilled user stories.

Nairobi, Kenya

As a Business Development & KYC Specialist I played a crucial role in driving new business growth while ensuring compliance with Know Your Customer (KYC) regulations. This position required a unique blend of sales acumen, relationship management skills, and a thorough understanding of KYC/AML (Anti-Money Laundering) principles within the banking.

Masters In Computer Science, Information Technology Management( Major)

Certificate, Fintech Compliance ,Payments And Global Regulations

Certificate, Information Systems Auditing, Controls And Assurance

Activities and Societies: Information systems Audit, Control and Assurance

Sdgs And The Law, Sdgs And Law

Business Information Technology And Management, Information Technology

Certified Information Systems Auditor-Cisa

Certified Data Protection, Center For Intellectual Property & Information Technology Law, Pass