Looking for a job

leah Kimata

@leahkimata

Cyber and technology risk leader at SY-Intelli Consulting, leading a Tier 3 bank audit and assessing cloud and fintech risks.

Kenya

Message

At SY-Intelli Consulting LLP, I led an IT audit of a Tier 3 bank, covering security governance, IT general controls, application controls and regulatory compliance. I also assessed risks in cloud adoption, fintech integrations and digital projects.

At Standard Chartered Bank Kenya, I held approval and veto authority on technology risk decisions and served as risk lead on the CIO Leadership Team. I oversaw cyber and technology risk across 10+ markets, including third-party risk governance and regulatory reporting.

As Head Information Security Risk Officer, Africa and Pakistan, I ran scenario-led threat assessments and produced the regional Cyber Security Risk Radar. I also worked with business teams to build security into new technology from the start.

At KPMG, I delivered IT audits and security risk assessments across East and West Africa, and built KPMG Ghana's data analytics and IT assurance practice. My work also included core banking and enterprise systems data migrations, and cyber security and business resilience programmes.

Experience

Work history, roles, and key accomplishments

Current

Lead Auditor

Current

SY-Intelli Consulting LLP

Sep 2026 - Present (2 months)

Led IT audits for a Tier 3 bank covering security governance, IT general controls, application controls, and regulatory compliance. Assessed security risks of cloud adoption, fintech integrations, and digital projects, and tested recovery arrangements through scenario exercises.

IT Audit Security Governance IT General Controls Application control Regulatory Compliance Cloud Security Fintech Scenario Testing

Executive Director, Cyber and Technology Risk Governance

Standard Chartered Bank Kenya

Jul 2024 - Feb 2026 (1 year 7 months)

Led second-line oversight of technology and cyber risk across 10+ markets, holding approval and veto authority on technology risk decisions. Oversaw security risk during data centre migrations, platform modernisation, and business segment closures, and managed regulatory reporting and cross-market incident simulations.

Cyber Risk Technology Risk Governance Risk Management Regulatory Reporting Cyber Incident Simulation Third Party Risk Data Centre Migration

Head Information Security Risk Officer, Africa and Pakistan

Standard Chartered Bank Kenya

Jul 2021 - Jul 2024 (3 years)

Led information and cyber security risk management across Africa and Pakistan under delegated authority from the Group Chief Information Security Risk Officer. Ran scenario-led threat assessments, produced the regional Cyber Security Risk Radar, and helped shape the Group Cyber Security Risk Type Framework.

Infosec Cybersecurity Risk Management Threat Assessment Risk Frameworks Mentorship

Information Security Risk Officer, Africa

Standard Chartered Bank Kenya

Mar 2020 - Jul 2021 (1 year 4 months)

Set up second-line security risk oversight for East Africa and extended the framework across Africa. Managed third-party security risk and cyber resilience plans for more than 10 markets, and co-drafted national cyber security regulations in Uganda.

Infosec Risk Management Third Party Risk Cyber Resilience Regulatory Compliance

Chief Information Security Officer, Kenya

Standard Chartered Bank Kenya

Mar 2019 - Mar 2020 (1 year)

Ran the CISO function, reporting to the Country CEO and the Board Risk Committee, with responsibility for cyber security, technology risk, data privacy, third-party risk, and operational resilience. Carried out security risk assessments of digital products and fintech partnerships, and ran crisis simulations.

CISO Cybersecurity Technology Risk Data Privacy Third Party Risk Operational Resilience Crisis Simulations

Regional Manager, IT Advisory

KPMG

Jan 2015 - Jan 2019 (4 years)

Delivered IT audits, security risk assessments, and advisory work for clients across East and West Africa. Led cyber security and business resilience programmes, including continuity frameworks and disaster recovery drills.

IT Audit Security Risk Assessment Cybersecurity Business Resilience Disaster Recovery

Manager, IT Advisory (secondment, Ghana)

KPMG

Jan 2013 - Jan 2015 (2 years)

Managed IT advisory projects, including data migration and quality assurance for core banking and enterprise systems. Built KPMG Ghana's data analytics and IT assurance practice.

IT advisory Data Migration Quality Assurance Data Analysis Finacle Flexcube SAP

Advisor and Senior Advisor, IT Advisory

KPMG

Jan 2007 - Jan 2013 (6 years)

Delivered IT audits, security risk assessments, and advisory work for clients across East and West Africa. Worked with governments and regulators on national ICT policies and cyber security regulations.

IT Audit Security Risk Assessment Advisory ICT Policies Cybersecurity