Caaayo Humug

I’m a Senior Information Security Officer focused on protecting information systems and data through strong security policies, risk assessments, and practical enablement. At Rainforest Alliance, I architect and follow up Information Security Awareness Training, and I design controls that help teams operate securely with confidence.

I automate identity workflows by creating user account provisioning and de-provisioning scripts and workflows in systems like SailPoint and Okta—reducing onboarding time by 40% while minimizing insider threat risks. I also enforce authentication and authorization protocols using zero trust, least privileged, and RBAC models to prevent privilege escalation in cloud-based infrastructures.

Previously, as a Data Protection & Compliance Engineer at Dell Technologies (KCB Project), I configured data security controls such as encryption, intrusion detection, and DLP to protect data at rest, in transit, and in use. I strengthened operational resilience through regular backup tests and improved backup performance by 50%, saving 49 man-hours monthly, while driving adherence to GDPR, PCI DSS, NIST-CSF, and ISO 27001.

Earlier, I worked as a Senior Cyber Security Engineer at New York Global Consultants Inc. (NYGCI), where I proposed an incident response plan that improved preparedness by 79% and systematized penetration testing of 17 web systems and mobile applications. I also began building hands-on security foundations as a Network Security Administrator at Mount Kenya University, maintaining firewalls, IDS/IPS, SIEMs, and VPNs across a 500+ device network—alongside automation that improved detection and response times by up to 37%.