fiona wachira

As a Cybersecurity Mentor, I played a pivotal role in empowering women from East africa through the Standard Chartered, and Strathmore University Women in Cyber Mentorship Programme. The program aimed at bridging the cybersecurity skills and gender gap. The initiative provided a blended learning experience, combining technical and soft skills training, while also fostering collaboration among ind

Lead enterprise-wide cybersecurity governance, IT risk management, and regulatory compliance initiatives. Coordinate user access recertification, phishing simulations, and third-party cyber risk assessments.

Lead enterprise-wide cybersecurity governance, IT risk management, and regulatory compliance initiatives aligned with organizational objectives, industry standards, and regulatory requirements.
Drive compliance with ISO 27001, NIST CSF, PCI-DSS, the Kenya Data Protection Act and enterprise risk management frameworks.
Maintain the enterprise cyber risk register by identifying, assessing, monitoring

Spearhead review and localization of cybersecurity standards to ensure security practices are aligned with best practice.
Lead team in deployment of an IAM/LAM solution for effective management of identity and user access to ensure access control.
Lead team in deployment and management of PAM solution to effectively manage and monitor use of privilege accounts.
Provide guidance on secure design pr

Assessed cybersecurity risks and exposures, conducted risk assessments and vulnerability scans, and coordinated penetration testing and red team exercises. Monitored SIEM logs and supported incident response.

Conducted threat modelling and architecture reviews for critical financial applications. Partnered with IT and engineering teams to embed encryption and secure key handling into payment systems.

Lead team in deployment of a PAM solution to effectively manage and monitor use of privileged accounts.
Integrate various data sources, such as logs from servers, network devices and applications, into the SIEM system for comprehensive monitoring.
Update SIEM correlation rules and alerts based on the latest threat intelligence and evolving threat landscape.
Respond to alerts generated by SIEM, pri

Monitored networks for security breaches, developed security standards, and implemented user access controls and IAM systems. Performed vulnerability assessments and deployed endpoint detection tools.

Monitor the organization’s networks for security breaches and investigate violations when they
occur.
Develop and direct implementation of security standards and best practices for the organization.
Set and implement user access controls and identity and access management systems.
Perform regular audits to ensure security practices are compliant.
Deploy endpoint detection and prevention tools to

Participate in auditing IT security policies of a health institution
Conduct proactive research to analyse network security weakness and recommend appropriate strategies.
Interact with various security products such as firewalls, SIEMs, IDS/IPS and virus protection.
Responsible for curriculum development, lecturing and mentoring of students in key IT security projects such as Safaricom Digital Aca

In progress: ISO 27001 Lead Implementer certification.

In progress: Certified Information Systems Security Professional (CISSP) certification.

In progress: Certified Cloud Security Professional (CCSP) certification.

Sep 2024

Jul 2023 · Expired Jul 2026

Aug 2023

Jan 2021

Jan 2021

Master of Science in Information Systems Security from Strathmore University, Nairobi, Kenya, completed in 2021.

Bachelor of Science in Informatics from Strathmore University, Nairobi, Kenya, completed in 2018.

Certified Information Security Manager (CISM) certification.

Certified Ethical Hacker (CEH) certification.

Computer Hacking Forensic Investigator (CHFI) certification.