Open to opportunities

KYOMUHENDO IVAN

@kyomuhendoivan

Message

IT Systems Auditor at Infectious Diseases Institute assessing controls across health, research and enterprise systems.

Uganda

Message

At Infectious Diseases Institute, I provide risk-based assurance across health, research and enterprise systems. I assess controls for platforms including ERP, laboratory and clinical systems, identity services and infrastructure, and follow up on remediation to strengthen data protection and operational resilience.

At NSSF Uganda, I contributed to nationwide network and security modernisation, including deployments across headquarters and 21 regional branches with no unplanned downtime. At Rocket Health, I reduced monthly internet and infrastructure expenditure from UGX 44 million to UGX 11 million while supporting critical telemedicine operations.

Experience

Work history, roles, and key accomplishments

Current

Executive Chair

Current

Professional Society for IT (ProSEIT)

Sep 2026 - Present (1 month)

Provide governance leadership for a national professional body focused on standards, ethics and development of the IT profession.

Governance Leadership Standards Development Ethics Stakeholder Engagement

Current

IT Systems Auditor

Current

Infectious Diseases Institute (IDI)

Jul 2024 - Present (2 years 3 months)

Provide independent, risk-based assurance over enterprise, health, research and infrastructure systems, working with system owners and management to improve governance, control effectiveness, data protection and operational resilience.

D365 Business Central EMR LIMS Microsoft 365 Active Directory Tenable Nessus Sophos SIEM VMWare ISO 27001 NIST IT Audit Risk Assessment Data Protection Business Continuity

Lead IT Infrastructure & Integration Consultant

Guardian Health / MyDawa

Jun 2025 - Jul 2025 (1 month)

Led physical and logical data-centre and network consolidation following MyDawa’s acquisition of Rocket Health.

Data Centre Consolidation Network Architecture Firewall Policy Design IP Addressing Post Merger Integration

Lead IT Infrastructure, Data Warehouse & Software Consultant

Centre for Applied Digital Health (CADH) / Biobank Project

Jan 2025 - Jun 2025 (5 months)

Translated operational, research and data-hosting requirements into an end-to-end technical architecture, implementation plan, budget, technical specifications and bill of quantities.

ProLiant Proxmox VE TrueNAS Cisco Catalyst NETGATE UniFi REST APIs DHIS2 ELMIS FHIR Threat Modeling Penetration Testing OWASP SDLC Technical Architecture Procurement

Technology Assurance Advisor

IDI Staff Cooperative Society (IDISCS)

Dec 2024 - Dec 2024 (0 months)

Conducted independent technical assurance over candidate core microfinance platforms before procurement.

Technical Assurance Vendor Assessment Dataflow APIs Privacy Transactional Controls Scalability Risk Assessment

IT Security Officer

I&M Bank Uganda Ltd

Jan 2024 - Jun 2024 (5 months)

Supported cybersecurity operations, technology-risk governance and control assurance in a regulated banking environment, translating security metrics and technical exposure into management and Board-level reporting.

Splunk Darktrace BeyondTrust PAM RSA SecurID Azure MDM Symantec Endpoint Encryption Control Self Assessment Change Advisory Board NIST Business Continuity Disaster Recovery Cybersecurity Licensing Board Reporting

Network Engineer

Rocket Health / The Medical Concierge Group Ltd

Sep 2022 - Dec 2023 (1 year 3 months)

Led network, communications, monitoring and service-management improvements supporting 24/7 telemedicine, clinic, pharmacy, warehouse and corporate operations.

Asterisk VoIP Yealink Linphone SIP PFsense D Link UniFi Zabbix OTRS ITIL network design VLAN Firewalls Bandwidth Management Cost Reduction Training

Network & Security Administration Specialist

National Social Security Fund (NSSF) Uganda

Oct 2019 - Aug 2022 (2 years 10 months)

Managed and secured nationwide network, data-centre and endpoint services supporting headquarters and 21 regional branches in a high-availability social-security environment.

Fortinet Cisco FortiNac FortiGate StellarCyber Cynet XDR Imperva F5 BIG IP FortiClient EMS Kaspersky RealVNC Network Security Data Centres Endpoint Security SIEM Load Balancing

IT Infrastructure Officer

National Social Security Fund (NSSF) Uganda

Aug 2018 - Sep 2019 (1 year 1 month)

Administered enterprise infrastructure, virtualisation, endpoint protection, communications, identity services, asset controls and branch technology platforms.

Microsoft Dynamics CRM Avaya Kaspersky Wavetec VSphere Dell PowerEdge SAN NAS Active Directory DNS DHCP Group Policy Print Server MyQ Asset Management Intern Supervision

Service Desk Analyst / IT Support Specialist

National Social Security Fund (NSSF) Uganda

Sep 2013 - Jul 2018 (4 years 10 months)

Delivered Tier 1 and Tier 2 support, endpoint deployment, identity administration, security monitoring and asset-control services for a large distributed workforce.

Windows Deployment Services SCCM Kaspersky Security Center Active Directory Incident Management Remote Support hardware troubleshooting Antivirus Asset Verification User Training

Education

Degrees, certifications, and relevant coursework

Bishop Stuart University

Bachelor of Information Technology, Information Technology

2010 - 2013

Grade: CGPA: 3.49

Bachelor of Information Technology degree from Bishop Stuart University, Mbarara, Uganda, completed in 2013 with a CGPA of 3.49.

Exemplar Global

ISO/IEC 27001 Lead Auditor, Information Security

Professional certification as ISO/IEC 27001 Lead Auditor from Exemplar Global.

Axelos

ITIL v3, IT Service Management

Professional certification in ITIL v3 from Axelos.

Cisco

Cisco Certified Network Associate (CCNA), Networking

Professional certification as Cisco Certified Network Associate (CCNA) from Cisco.

Microsoft

Microsoft Certified Solutions Associate (MCSA), Information Technology

Professional certification as Microsoft Certified Solutions Associate (MCSA) from Microsoft.

Kaspersky

Kaspersky Endpoint Security 11 Administrator, Endpoint Security

Certificate of completion for Kaspersky Endpoint Security 11 Administrator training in Nairobi.

ISC2

ISC2 Certified in Cybersecurity (CC), Cybersecurity

Certificate of completion for ISC2 Certified in Cybersecurity (CC).

Cybrary

CISA Examination Preparation, Information Systems Audit

Completed CISA examination preparation and training through Cybrary; not represented as CISA certification.

Computer Learning Centre

CISM Training, Information Security Management

Completed CISM training coursework through Computer Learning Centre, an ISACA training partner; not represented as CISM certification.