Open to opportunities

MERCY CHEBET

@mercychebet3

I am an IT risk and cybersecurity consultant improving organizations' security posture through audits, compliance, and advisory.

Kenya

Message

What I'm looking for

I seek a mid-senior cybersecurity or IT risk role where I can lead audits, drive compliance, mentor teams, and strengthen security posture across regulated organizations.

I am a results-driven IT risk and cybersecurity consultant with over four years of experience delivering technology risk assurance, cybersecurity audits, and IT control evaluations.

I have audited clients across Tier 1 banks, telecommunications, insurance, fintech, and NGOs, and delivered risk advisory projects in Kenya, Uganda, Tanzania, Djibouti, and Somalia, presenting findings and strategic recommendations to senior management and boards.

I work with frameworks including COBIT, NIST, and ISO 27001 and support data protection initiatives under GDPR and Kenya's Data Protection Act, backed by certifications such as CISA and ISO 27001 Lead Auditor.

I am passionate about data protection, cybersecurity awareness, and capacity building, and I mentor junior analysts while driving measurable improvements in clients' security and compliance posture.

Experience

Work history, roles, and key accomplishments

Current

IT Risk Advisory Consultant

Current

Deloitte & Touche LLP

Sep 2024 - Present (1 year)

Audited 7+ clients annually across tier-1 banks, telecoms, insurance, fintech and NGOs across East Africa, delivering IT risk advisory that improved security posture and influenced board-level mitigation decisions.

ITGC COBIT NIST ISO 27001 Cloud Security Risk Assessment Board Reporting

IT Risk Advisory Analyst

Deloitte & Touche LLP

Jan 2022 - Aug 2024 (2 years 7 months)

Supported 15+ IT audit and cybersecurity engagements across regulated industries, assessing IT general controls and delivering risk-based reports and dashboards for executives and regulators.

IT General Controls Cybersecurity GDPR)Kenya Data Protection Act ISO 27001 Dashboards

Technical Consultant

Dynasoft Business Solutions Ltd

Jan 2021 - Dec 2021 (11 months)

Delivered Microsoft Dynamics 365 and Azure solutions, assessed client IT needs and demonstrated ROI while coordinating with business development to enhance product features.

Microsoft Dynamics 365 Azure Solution Assessment ROI Analysis Technical Implementation

Cybersecurity Research Assistant

Multimedia University of Kenya

Oct 2019 - Dec 2020 (1 year 2 months)

Contributed to the Serianu Cybersecurity Africa Report (2019), coordinated data privacy research across five African countries, and delivered cybersecurity awareness training to 80+ students.

Research Data Privacy Report Writing Cross Country Coordination

ICT Trainee

National Social Security Fund

May 2019 - Sep 2019 (4 months)

Resolved application issues, improved user support processes, and ensured adherence to cybersecurity and IT policies.

Application Support User Support Troubleshooting

Education

Degrees, certifications, and relevant coursework

Multimedia University of Kenya

Bachelor of Business Information Technology, Business Information Technology

Activities and societies: CERT Club member; Cybersecurity Research Assistant; contributed to Serianu Cybersecurity Africa Report; facilitated cybersecurity awareness training for students.

Bachelor of Business Information Technology degree; participated in the university CERT club and cybersecurity research activities, contributing to the Serianu Cybersecurity Africa Report and delivering awareness training.