Michael Munga

Group Chief Risk Officer | CISO @ Asante Financial Services Group

About

A seasoned cyber security and risk management professional who has taken a leading role in cyber security assurance and risk management for clients in all industries in the East African Region and in Asia. I have designed and implemented Cyber security strategies, policies and frameworks as per internationally recognized standards such as ISO 27001 and NIST. I have successfully lead cyber response teams in the resolution and investigation of cyber security breaches; built both red and blue teams; implemented cyber security controls for mobile/internet banking and core banking systems. I posses extensive knowledge on cloud computing and API security. Specialties: IT security, Disaster recovery, IT project management, IT Governance, Help Desk architecture, IT Audit, penetration testing, server/database hardening, and Networking. Risk management specialties include: compliance risk, strategic risk,market risk, credit risk, IT risk, liquidity risk, reputational risks and anti money laundering risk Certifications: CISA, CISM, ISO27001 Lead Auditor, ITIL v3

Country

City

Kenya

Industry

Information Technology & Services

Skill

Security, Disaster Recovery, Information Security, Project Management, IT Audit, Governance, Risk Assessment, Windows, Technical Support, CISA, Architecture, Risk Management, Penetration Testing, ISO 27001, Networking, Information Technology, IT Strategy, System Administration, Network Administration, IT Management

Experience

Group Chief Risk Officer | CISO

Asante Financial Services Group

2019-11 - Present · 6 yrs 11 mos

I am responsible for managing the following aspects of risk management: Cyber security and cyber resilience(ICT risk), reputation risks, market risks, Business continuity and disaster recovery, AML risk, credit risk, strategic risks, operational risks, liquidity risk and fraud management

CISO/ CRO

Sidian Bank

2015-8 - 2019-11 · 4 yrs 4 mos

Kenya

Currently, the Chief Information Security officer at Sidian bank. Prior to this role, I was the IT security manager at KCB bank group. I was also at KPMG for 7 years where I was charged with the responsibility of delivering Cyber security assurance assignments using a large team of IT consultants. I led numerous IT cyber security assurance assignments in the Banking, Insurance, Manufacturing and Government sectors across the East Africa region. I also had a stint in India. I am also in charge of the enterprise risk department in Sidian bank and thus i do lead in managing the following risks as per the CBK prudential guidelines: Operational, Market, Strategic, liquidity, credit, reputational. Anti money laundering and compliance risks