John Lagat
@johnlagat
Senior cyber risk and IT audit leader delivering ISO-aligned assurance and practical governance outcomes.
What I'm looking for
I’m a Senior Information Security Assurance, Cyber Risk, GRC, and IT Audit professional with 12+ years of experience strengthening cyber resilience, technology governance, and regulatory compliance across financial services and logistics environments. I translate complex technology risks into practical business decisions, delivering assurance programmes aligned with ISO/IEC 27001, NIST, PCI DSS, and data protection requirements.
In recent roles, I’ve strengthened enterprise cyber resilience through information security assurance reviews across cloud and on-premises environments, and designed annual risk-based IT audit programmes aligned to Board expectations and regulatory obligations. I’ve also driven measurable outcomes—such as a 30% reduction in IT operational expenditure, a 90% reduction in network security incidents, and annual savings exceeding KES 3 million—by executing vulnerability assessments, penetration testing reviews, and cyber threat analysis, while establishing frameworks like Third Party Risk Management to improve governance oversight.
Experience
Work history, roles, and key accomplishments
Secretary, Special Programs Committee
ISACA Kenya Chapter
Jul 2024 - Present (2 years)
Serves as Secretary for the Special Programs Committee within the ISACA Kenya Chapter.
AI Remote Freelance Projects
Remote
Jan 2024 - Present (2 years 6 months)
Evaluated AI-generated text, image, and video content by reviewing prompts and model responses to improve accuracy, consistency, and quality. Annotated and labeled datasets and tested web-based interfaces to identify quality and usability issues and recommend improvements.
Senior Information Systems Auditor
Nairobi Securities Exchange
Feb 2023 - Present (3 years 5 months)
Conduct information security assurance reviews across cloud and on-premises environments and execute risk-based IT audit programmes aligned to board expectations and regulatory obligations. Evaluate application controls and infrastructure security against ISO/IEC 27001, NIST, PCI DSS, GDPR, and the Kenya Data Protection Act, and report prioritized remediation actions to leadership.
Community Project Volunteer
Youth for Change & Development
Mar 2019 - Present (7 years 4 months)
Volunteers for community projects with Youth for Change & Development.
ISACA Foundation Scholarship Judge
ISACA
Nov 2024 - Dec 2024 (1 month)
Served as a judge for ISACA Foundation scholarship selection (remote).
Regional IT & Systems Administrator
Express Shipping & Logistics (EA) Ltd
Jan 2017 - Jan 2023 (6 years)
Directed regional technology operations across four East African countries, delivering secure infrastructure and driving digital transformation initiatives. Implemented Cisco Meraki firewall deployments and Microsoft 365/Azure/Hyper-V capabilities, built a SharePoint intranet solution, and served on the procurement committee to strengthen vendor governance and achieve annual savings exceeding KES
ICT Assistant
Express Shipping & Logistics (EA) Ltd
Apr 2014 - Dec 2016 (2 years 8 months)
Supported headquarters and branch IT infrastructure by installing, configuring, and maintaining servers, network devices, and end-user equipment. Helped maintain continuity and disaster recovery readiness, resolved technical incidents to minimize downtime, and improved reliability through preventive maintenance, documentation, and remote support.
Peace Sensitisation Volunteer
Peace Council Club
Sep 2009 - Jul 2012 (2 years 10 months)
Volunteered with the Peace Council Club on peace sensitisation activities.
Mentor
Global Mentorship Initiative
Provided mentoring support as part of the Global Mentorship Initiative (remote).
Education
Degrees, certifications, and relevant coursework
Kenya Methodist University
Bachelor of Business Information Technology, Business Information Technology
Completed a Bachelor of Business Information Technology at Kenya Methodist University.
Tech stack
Software and tools used professionally
Availability
Location
Authorized to work in
Job categories
Skills
Interested in hiring John?
You can contact John and 90k+ other talented remote workers on Himalayas.
Message JohnGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
