Skip to main content
John LagatJL
Open to opportunities

John Lagat

@johnlagat

Senior cyber risk and IT audit leader delivering ISO-aligned assurance and practical governance outcomes.

Kenya
Message

What I'm looking for

I’m seeking a senior leadership role where I can own information security governance and enterprise assurance—bringing technology risk, GRC rigor, and board-ready reporting to strengthen control maturity, regulatory readiness, and cyber resilience.

I’m a Senior Information Security Assurance, Cyber Risk, GRC, and IT Audit professional with 12+ years of experience strengthening cyber resilience, technology governance, and regulatory compliance across financial services and logistics environments. I translate complex technology risks into practical business decisions, delivering assurance programmes aligned with ISO/IEC 27001, NIST, PCI DSS, and data protection requirements.

In recent roles, I’ve strengthened enterprise cyber resilience through information security assurance reviews across cloud and on-premises environments, and designed annual risk-based IT audit programmes aligned to Board expectations and regulatory obligations. I’ve also driven measurable outcomes—such as a 30% reduction in IT operational expenditure, a 90% reduction in network security incidents, and annual savings exceeding KES 3 million—by executing vulnerability assessments, penetration testing reviews, and cyber threat analysis, while establishing frameworks like Third Party Risk Management to improve governance oversight.

Experience

Work history, roles, and key accomplishments

IC
Current

Secretary, Special Programs Committee

ISACA Kenya Chapter

Jul 2024 - Present (2 years)

Serves as Secretary for the Special Programs Committee within the ISACA Kenya Chapter.

RE
Current

AI Remote Freelance Projects

Remote

Jan 2024 - Present (2 years 6 months)

Evaluated AI-generated text, image, and video content by reviewing prompts and model responses to improve accuracy, consistency, and quality. Annotated and labeled datasets and tested web-based interfaces to identify quality and usability issues and recommend improvements.

NE
Current

Senior Information Systems Auditor

Nairobi Securities Exchange

Feb 2023 - Present (3 years 5 months)

Conduct information security assurance reviews across cloud and on-premises environments and execute risk-based IT audit programmes aligned to board expectations and regulatory obligations. Evaluate application controls and infrastructure security against ISO/IEC 27001, NIST, PCI DSS, GDPR, and the Kenya Data Protection Act, and report prioritized remediation actions to leadership.

YD
Current

Community Project Volunteer

Youth for Change & Development

Mar 2019 - Present (7 years 4 months)

Volunteers for community projects with Youth for Change & Development.

IS

ISACA Foundation Scholarship Judge

ISACA

Nov 2024 - Dec 2024 (1 month)

Served as a judge for ISACA Foundation scholarship selection (remote).

EL

Regional IT & Systems Administrator

Express Shipping & Logistics (EA) Ltd

Jan 2017 - Jan 2023 (6 years)

Directed regional technology operations across four East African countries, delivering secure infrastructure and driving digital transformation initiatives. Implemented Cisco Meraki firewall deployments and Microsoft 365/Azure/Hyper-V capabilities, built a SharePoint intranet solution, and served on the procurement committee to strengthen vendor governance and achieve annual savings exceeding KES

EL

ICT Assistant

Express Shipping & Logistics (EA) Ltd

Apr 2014 - Dec 2016 (2 years 8 months)

Supported headquarters and branch IT infrastructure by installing, configuring, and maintaining servers, network devices, and end-user equipment. Helped maintain continuity and disaster recovery readiness, resolved technical incidents to minimize downtime, and improved reliability through preventive maintenance, documentation, and remote support.

PC

Peace Sensitisation Volunteer

Peace Council Club

Sep 2009 - Jul 2012 (2 years 10 months)

Volunteered with the Peace Council Club on peace sensitisation activities.

GI

Mentor

Global Mentorship Initiative

Provided mentoring support as part of the Global Mentorship Initiative (remote).

Education

Degrees, certifications, and relevant coursework

Kenya Methodist University logoKU

Kenya Methodist University

Bachelor of Business Information Technology, Business Information Technology

Completed a Bachelor of Business Information Technology at Kenya Methodist University.

Get matched with your dream remote job

Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan