Open to opportunities

Lucy Nzilani

@lucynzilani

Message

I am a results-focused Project Manager delivering complex IT and cybersecurity programs across enterprise sectors.

Kenya

Message

What I'm looking for

I seek senior project management roles leading complex cybersecurity and IT programs where I can drive ISO/compliance initiatives, lead cross-functional teams, and deliver measurable business value while engaging with C-level stakeholders.

I am a Project Manager experienced in the successful leadership and delivery of complex end-to-end projects across Banking/Financial services, Insurance, Transportation, Retail & Consumer, Technology, Communications and Entertainment sectors. I consistently ensure projects are delivered in line with budget, scope, schedule, risks, outcomes, prioritisation, value and benefits.

I have led major implementations including Forcepoint Data Loss Prevention projects across Africa, FortSIEM deployments in Ethiopia and Kenya, PAM deliveries across Africa, and Imperva DAM & WAF rollouts across East and Southern Africa. I have implemented ISO 27001 as an ISMS auditor, delivered ISO training, conducted security audits, vulnerability assessments and penetration testing, and produced remediation reports and governance artifacts.

I am motivated, diligent and meticulous with strong stakeholder engagement up to C-level, a talent for translating technical controls into business-ready advice, and a track record of simplifying policies and driving measurable security and compliance outcomes while maintaining high-quality standards.

Experience

Work history, roles, and key accomplishments

Current

Project & Service Manager

Current

Isolutions Associates Ltd

May 2023 - Present (2 years 5 months)

Led delivery of DLP, FortiSIEM, PAM, Imperva DAM/WAF and other security projects across East & Southern Africa, controlling scope, schedule, resources and budgets to meet stakeholder requirements. Built C-level relationships, tracked risks/issues, and ensured ISMS policy adoption across teams.

Project Management Stakeholder Engagement SIEM PAM Risk Management

Cybersecurity Consultant

Isolutions Associates Ltd

Jul 2021 - Apr 2023 (1 year 9 months)

Conducted security audits, vulnerability assessments and penetration tests to identify risks and recommend remediations, and aligned ICT infrastructure to business functions. Prepared audit reports, implemented security controls and supported strategic security planning.

Vulnerability Assessment Penetration Testing Security Auditing IT Governance Enterprise Architecture Incident Response Risk Remediation Plans

ISMS Auditor (ISO 27001:2013)

Isolutions Associates Ltd

Sep 2020 - Jun 2021 (9 months)

Implemented and maintained ISO 27001 processes, delivered staff training, and managed ISO documentation and review meetings to improve the effectiveness of the Information Security Management System. Drove process optimisation to support compliance and certification readiness.

ISO 27001 Audit Reporting Compliance Policy Development Training Documentation

Technical Account Manager

Isolutions Associates Ltd

Feb 2018 - Jun 2020 (2 years 4 months)

Managed key accounts, deployed hardware/software solutions and tailored high-touch technical support for C-level customers while directing data protection and IT control reviews. Identified commercial opportunities and reported on control effectiveness with remediation recommendations.

Account Management Data Protection Customer Engagement

Principal Security Consultant

Africapaciti

Mar 2017 - Dec 2017 (9 months)

Directed incident response planning and investigations, conducted security audits, and developed long- and short-term strategies and roadmaps to mitigate information security threats. Advised on compliance and secured management sign-off for security initiatives.

Incident Response Security Auditing Risk Management Policy Development Compliance Security Strategy SIEM

Tier 2 Consultant

Professional Technologies

Sep 2015 - Apr 2017 (1 year 7 months)

Performed risk assessments and security briefings, monitored control effectiveness, and led incident investigations and continuity exercises to protect customer and corporate assets. Developed compliance strategies and proactive security measures.

Risk Assessment Incident Management Security Monitoring Compliance Strategy

Support Engineer

Professional Technologies

Nov 2010 - Sep 2015 (4 years 10 months)

Developed and implemented information security policies and controls, managed access control programs, and provided subject-matter expertise across projects to maintain confidentiality, integrity and availability of systems. Assessed and tested security controls and advised on security technologies.