Micky Katembu

ICT Risk and Cybersecurity professional with over 10 years of progressive ICT experience, including more than 6 years in a dedicated ICT Risk & Cybersecurity role. Experienced in ICT risk assessments, IT General Controls (ITGCs), information security governance, technology control reviews, ICT risk registers, identity and access management, vulnerability management, incident response, audit remediation, business continuity and disaster recovery controls. Strong technical foundation in Microsoft 365, Active Directory, Windows Server, enterprise networks, firewalls, backup and recovery systems, with practical experience translating technical vulnerabilities and control weaknesses into identifiable business and technology risks.

Certified Ethical

Hacker (CEH v13) with practical cybersecurity and penetration-testing exposure, complemented by CISA training and a BSc in Information Technology. Experienced in supporting management through ICT risk reporting, control-gap identification, remediation monitoring and continuous improvement of technology control environments.

ICT Risk & Cybersecurity Officer - Simplified Communications Ltd.

(2020-05)

• Conduct ICT risk assessments to identify technology, cybersecurity and operational risks across enterprise ICT environments.
• Assess the design and effectiveness of IT General Controls (ITGCs) and recommend appropriate risk mitigation measures.
• Maintain the ICT Risk Register, document identified risks, monitor mitigation actions and report risk status to management.
• Support implementation and continuous improvement of ICT Risk Management and Information Security policies, standards, procedures and controls.
• Monitor compliance with ICT security policies, technology standards and applicable requirements, escalating identified control gaps.
• Coordinate vulnerability assessments, security reviews and remediation activities to reduce cybersecurity exposure.
• Evaluate backup, disaster recovery and business continuity controls to strengthen operational resilience and availability of critical systems.
• Support ICT incident response, including investigation, root-cause analysis, documentation of findings and recommendation of corrective actions.
• Perform technology-risk reviews for proposed ICT solutions and recommend appropriate security controls prior to implementation.
• Support internal and external ICT audits by providing control evidence, coordinating remediation activities and monitoring closure of audit findings.
• Implement and monitor network security controls, including firewall administration, secure configurations and continuous security monitoring.
• Conduct cybersecurity awareness training and prepare ICT risk, cybersecurity and compliance reports for management.

Executive Research Assistant - under Mwingi West Constituency Office - Parliamentary Service Commission

(2017-09 - 2020-04)

• Supported executive research, information management and technology-enabled administrative operations in a highly computerized public sector environment.
• Administered Microsoft 365 and Active Directory identity and access controls, enforcing least-privilege principles, user lifecycle management, and periodic access reviews to reduce unauthorized access risk during information processing, collaboration, documentation and productivity.
• Supported ICT governance and information security-related initiatives within the working environment.
• Applied confidentiality and security practices in the management of information and technology resources.

ICT Officer - Wiper Democratic Movement (Kenya)

(2015-10 - 2017-08)

In-charge of ICT & Network Administration (Based on Windows Server 2008), Website Management, Social Media Management.

ICT Officer (Supervisor) - Broadbase Promotions Ltd

(2015-05 - 2015-08)

• Supervising 80 Data clerks working 24hrs on a day and night shift based on a strict deadline
• Network Administration and support on Microsoft Windows Server 2008
• Daily Data Back-Up and Database update on Entries

Software Product Manager - Obulex Solutions

(2012-10 - 2015-09)

• Managed software product activities across the product lifecycle, from requirements and planning through implementation and user adoption.
• Worked with stakeholders to understand business requirements and translate them into technology and software solutions.
• Supported software implementation, product coordination, user engagement and operational improvement initiatives.
• Contributed to the identification and resolution of technology-related risks affecting software products and business processes.

ICT Officer - Regional Institute for Social Enterprise (RISE) Kenya

(2011-01 - 2012-10)

In charge of Information Communication Technology Department, RISE Kenya Social Media management, User Support and training, Training and tutoring computer courses, and Social Enterprise Solutions.

IT & Finance Administrator - Chosen Children of Promise (CCP)

(2007-10 - 2010-12)

In charge of I.T., Network Administration (Based on Windows Server 2003 & 2008), Website Management; Finance Management System and Control & Human Resource Management.

Office Manager - Chosen Children of Promise (CCP)

(2005-10 - 2007-09)

Office Administration, I.T. Support, Network Administration (Based on Windows Server 2003), Human Resource In-charge & Finance Management System and Control

Information Technology Department (Internship and Attachment) - Pan Africa Christian College

(2005-01 - 2005-05)

Network Administration (Based on Windows Server 2000), Hardware Support and User Support

Deputy Returning Officer (Contract) - Independent Electoral & Boundaries Commission (IEBC)

(2022-06 - 2022-12)

Deputizing the Constituency Returning Officer in the official coordination of the Registration of voters and Elections exercise in the 2022 National General Elections In charge of 231 Presiding Officers. Was involved in the 5 Tier level 2 Election Training and Management

ICT Voter Registration Assistant - Independent Electoral & Boundaries Commission (IEBC)

(2016-02 - 2016-05)

Configuration of Biometric Voter Registration Kits for the whole constituency, User Training, User Support and System Administration.

Master of Arts - Project Planning and Management (On-going) - University of Nairobi (UON) (2013-06)

Bachelor of Science (BSc.) - Information Technology - Jomo Kenyatta University of Agriculture and Technology (JKUAT) (2003-05 - 2005-07)

Diploma and Advanced Diploma - Information Technology - Kenya School of Professional Studies (2001-01 - 2002-12)

Kenya Certificate of Secondary Education (KCSE) - Kitui High School (1996-02 - 1999-11)