At Strathmore University, I assess institutional systems against the Kenya Data Protection Act, 2019 and ISO/IEC 27001. I document compliance gaps, recommend remediation, and conduct Privacy Impact Assessments for systems processing personal data.
I developed a DPO and ICT compliance checklist for new systems and maintain risk registers, system inventories, and remediation tracking. I also support incident response and personal data breach management with the ICT Security team.
On a Blue Team SOC lab project, I built a SIEM with Wazuh and ELK Stack to monitor Windows and Linux logs, implement alerting, and detect simulated attacks mapped to MITRE ATT&CK. I’m an ISO/IEC 27001 Lead Auditor and hold Oracle Cloud Infrastructure certifications.
