Open to opportunities

Lucy Wanjira

@lucywanjira

Message

Results-oriented technology risk consultant with extensive audit experience.

Kenya

Message

What I'm looking for

I am looking for a role that fosters professional growth, teamwork, and innovative problem-solving in technology risk and cybersecurity.

I am a highly motivated technology risk consultant with extensive experience in conducting information systems and security audits across diverse industries. My proven ability to plan, execute, and manage audit engagements effectively ensures compliance with regulations and best practices. I have demonstrated expertise in assessing IT risks, identifying vulnerabilities, and recommending effective controls, which has been pivotal in enhancing my clients' information systems.

Throughout my career, I have successfully led external IT audits for various clients, achieving a 100% completion rate. My role at Ernest & Young involves evaluating and validating the effectiveness of clients’ IT controls, focusing on critical areas such as change management and IT operations management. I pride myself on my strong analytical and problem-solving skills, coupled with excellent communication and interpersonal abilities, which allow me to facilitate effective discussions and decision-making during audit engagements.

Experience

Work history, roles, and key accomplishments

Current

Technology Risk Consultant

Current

Ernest & Young

Jan 2023 - Present (2 years 4 months)

Conducted external/internal IT audits across diverse sectors, ensuring compliance with regulations. Evaluated and validated the effectiveness of clients’ IT controls focusing on specific IT Audit domains. Provided & led discussions on IT management reports for audit engagements, facilitating effective communication and decision-making.

IT Audit IT General Controls Change Management Access Management IT Operations Management Risk Assessment Project Management

Cybersecurity Contractor

Amnet Cyberdefence Netron

Jan 2021 - Jan 2023 (2 years)

Assisted in designing and implementation of security policies, procedures, standards, and controls in line with regulation and/or current standards. Evaluated the effectiveness of existing cybersecurity measures by utilizing industry best practices and frameworks. Conducted comprehensive vulnerability assessments to identify and prioritize cyber risks and develop risk management strategies to miti

Cybersecurity Security Policies ISO 27001 NIST Vulnerability Assessment Risk Management Disaster Recovery Business Continuity

Education

Degrees, certifications, and relevant coursework

United States International University - Africa

Master of Science, Information Security

Grade: GPA: 3.610

Focused on advanced concepts in information security, including network security, cryptography, and risk management. Studied theoretical foundations and practical applications to protect digital assets and systems.

Southeastern Kenya University

Bachelor of Science, Information Technology

Grade: First-Class Honors (A)

Completed a comprehensive program in Information Technology, covering core areas such as programming, databases, and systems analysis. Achieved First-Class Honors, demonstrating strong academic performance.