Details
Skills
Cybersecurity & GRC:
Cybersecurity risk management, GRC frameworks (NIST CSF, ISO 27001, ISO 31000, COBIT)
Policy development, internal controls, regulatory compliance (e.g., GDPR, PCI DSS)
Security awareness, audit readiness, business continuity, and data protection
Audit & Financial Expertise:
Internal audit, compliance audits, forensic accounting
Financial reporting, budgeting, risk-based auditing
Revenue assurance and tax compliance
Technical Skills:
IT general controls, system access reviews, security control testing
Data analysis, Excel (advanced), Power BI (basic), Microsoft Office & Google Workspace
Familiarity with audit/GRC tools (e.g., Vanta, ZenGRC)
Professional Attributes:
Strong analytical thinking, communication, and presentation skills
Experience with stakeholder engagement, teamwork, and process improvement
Canadian workplace experience, multicultural sensitivity, and professional ethics
About
I am an experienced audit and cybersecurity professional with over 10 years in risk management, internal controls, and compliance. My background includes roles at Grant Thornton, AH Thakker, and nine years at the Uganda Revenue Authority, where I led tax audits and implemented financial controls.
Now based in Canada, I’m focused on transitioning into cybersecurity and GRC roles. I hold a CISA certification and am pursuing CRISC, with hands-on training in NIST CSF, COBIT, ISO 27001, and ISO 31000. I’ve also volunteered with Black CAP and participated in a co-op program to gain Canadian experience.
I hold two MBAs—including an Executive MBA from Quantic School of Business—and bring strong analytical, audit, and communication skills. I aim to help organizations strengthen their risk posture and cybersecurity frameworks through practical, business-aligned solutions.