Eddy kapten
@eddykapten
I strengthen technology, cyber, and regulatory controls for financial-services organisations through practical assurance and risk frameworks.
United KingdomWhat I'm looking for
At KPMG UK, I lead technology and cyber control assurance engagements for financial-services clients, delivering SOC 1, SOC 2, SOX, PCI DSS, ITGC, and application-control reviews.
I design ISO 27001-aligned risk and control frameworks, build new SOX programmes from the ground up, and translate complex technology risk into clear reporting for audit committees, regulators, and senior stakeholders. I have assessed more than 100 enterprise systems, cloud environments in AWS and Azure, payment-processing controls, AI-enabled reconciliation systems, and valuation-model data integrity.
Previously at KPMG East Africa, I audited banks, insurers, and critical payment infrastructure across Kenya, Uganda, and Rwanda. I lead multidisciplinary teams, coach junior auditors, and use Alteryx, IDEA, and Power BI to strengthen full-population testing, risk detection, and remediation tracking.
Experience
Work history, roles, and key accomplishments
Led design and implementation of an ISO 27001-aligned risk and control framework, and delivered SOC 1 & SOC 2 audits, SOX implementation, PCI DSS compliance, and ITGC reviews across 100+ systems. Provided risk assurance for AI-enabled systems and cloud security assessments.
Built broad IT audit coverage across Tier 1 banks and insurance firms, executing assurance across application controls, ITGC, IT governance, and cybersecurity. Led audits of payment infrastructure for the Central Bank of Kenya and conducted M&A cyber due diligence.
Performed IT controls audits for clients across Kenya, Uganda, and Rwanda, covering SOX compliance, ITGC, access management, and segregation of duties. Reviewed IT governance frameworks and business continuity plans, and assisted in preparing audit reports.
Education
Degrees, certifications, and relevant coursework
ISACA
Certified Information Security Manager (CISM), Information Security Management
Pursuing the Certified Information Security Manager (CISM) certification.
Jomo Kenyatta University of Agriculture and Technology
Bachelor of Engineering, Control and Instrumentation Engineering
Pursued a Bachelor of Engineering in Control and Instrumentation Engineering.
ISACA
Certified Information Systems Auditor (CISA), Information Systems Auditing
Certified Information Systems Auditor (CISA) designation.
AXELOS
PRINCE2 Foundation, Project Management
PRINCE2 Foundation certification in project management.
CaseWare
Certified IDEA Data Analyst, Data Analytics
Certified IDEA Data Analyst certification.
Oracle
Oracle Cloud Infrastructure Foundation Associate, Cloud Infrastructure
Oracle Cloud Infrastructure Foundation Associate certification.
Microsoft
Microsoft Security Fundamentals, Security
Microsoft Security Fundamentals certification.
ICSI
ICSI Certified Network Security Specialist, Network Security
ICSI Certified Network Security Specialist certification.
Availability
Location
United KingdomAuthorized to work in
Salary expectations
Job categories
Skills
Interested in hiring Eddy?
You can contact Eddy and 90k+ other talented remote workers on Himalayas.
Message EddyGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
