Open to opportunities

bernard babu

@bernardbabu1

Message

Seasoned GRC and data protection leader driving compliance and resilience.

Kenya

Message

What I'm looking for

I’m seeking a leadership role in GRC or data protection where I can build compliance programs, lead incident response, integrate security into business processes, and mentor teams within a collaborative, integrity-driven organization.

I am a seasoned Governance, Risk, and Compliance (GRC) specialist with extensive experience developing data protection, cybersecurity, and risk-management frameworks across NGOs, fintech, and banking sectors. I lead incident response, DPIAs, audits, and policy development to ensure regulatory compliance and operational resilience.

My hands-on background includes deploying technical controls such as NDR, SIEM, firewalls, IAM, and AWS services while managing third-party risk, patching programs, and security operations. I have a proven record of translating complex regulatory requirements into practical controls and training programs that build a culture of accountability.

I combine strategic oversight with operational discipline—creating SOPs, disaster recovery and breach-response plans, and data governance policies—while collaborating cross-functionally to integrate privacy-by-design and continuous improvement into business processes.

Experience

Work history, roles, and key accomplishments

Current

Lead - Data Protection & Compliance

Current

World Vision Kenya

Jun 2023 - Present (2 years 4 months)

Developed and maintained data protection and cybersecurity policies, led breach response and DPIAs, and conducted audits to ensure regulatory compliance and reduce privacy risk across the organization.

Data Protection Privacy Impact Assessment Incident Response Policy Development Regulatory Compliance Cybersecurity Data Governance Vendor Risk Management

Manager - IT Risk & Compliance

Asante Finance Group

Aug 2021 - May 2023 (1 year 9 months)

Led IT risk assessments, implemented security and risk policies, managed vulnerability patching and controls, and ensured compliance with DPA 2019 and GDPR to strengthen the fintech's security posture.

IT Risk Management Vulnerability Management IAM DAM Security Monitoring AWS Incident Management Security Awareness

Manager - IT Infrastructure & Cybersecurity

Sheria Sacco

Jan 2018 - Jul 2021 (3 years 6 months)

Managed core banking and network operations, developed BCP and security reports, maintained risk registers, and deployed perimeter and monitoring systems to ensure resilient financial services.

Network Administration Business Continuity Core Banking Systems Fortinet SIEM System Hardening Risk Register

Technical Support Engineer

Internet Solutions

May 2015 - Dec 2017 (2 years 7 months)

Resolved Level 1 network and server incidents, performed root cause analysis, led upskilling for engineers, and met SLA targets to improve service reliability and customer satisfaction.

Technical Support Root Cause Analysis SLA Management Customer Support Training

BSS-BTS Transmission Engineer

QTE Ltd

Jun 2011 - Nov 2013 (2 years 5 months)

Executed BSS/BTS installations and maintenance, managed spare parts inventory, supported NOC for alarm resolution, and produced daily activity reports to maintain network stability.

BSS BTS Maintenance Transmission Engineering Inventory Management LMT Software NOC Collaboration Installation Reporting

Education

Degrees, certifications, and relevant coursework

KCA University

Master of Science, Knowledge Management and Innovation

2024 - 2025

Master of Science in Knowledge Management and Innovation undertaken via distance learning to develop advanced skills in knowledge systems and innovation management.