MERCY CHEBET
Nairobi
Summary
Results-driven IT Risk and Cybersecurity Consultant with over 4 years’ experience in technology risk assurance, cybersecurity audits, and IT control evaluations. Skilled in frameworks such as COBIT, NIST, ISO 27001, GDPR, and Kenya’s Data Protection Act. Proven track record in delivering strategic recommendations to boards, improving risk posture, and managing audit teams. Passionate about data protection, cybersecurity awareness, and capacity building across organizations.
Overview
6
6
years of professional experience
7
7
Certification
Work History
IT Risk Advisory Consultant
Deloitte & Touche LLP
Nairobi
09.2024 - Current
- Audited over 7 clients annually across Tier 1 banks, telecommunications, insurance, fintech, and NGOs.
- Delivered risk advisory projects in Kenya, Uganda, Tanzania, Djibouti, and Somalia, enhancing clients’ IT security posture.
- Conducted IT security audits across applications, networks, databases, and cloud platforms using COBIT, NIST, and ISO 27001.
- Presented audit findings and cybersecurity strategies to senior management and boards to influence risk mitigation decisions.
- Mentored and led junior analysts in delivering cybersecurity risk engagements and knowledge-sharing sessions.
IT Risk Advisory Analyst
Deloitte & Touche LLP
Nairobi
01.2022 - 08.2024
- Supported 15+ IT audit and cybersecurity risk engagements for clients across multiple regulated industries.
- Conducted comprehensive assessments of IT general controls, cybersecurity policies, and internal systems.
- Provided actionable insights aligned with GDPR, Kenya Data Protection Act, and ISO 27001 compliance standards.
- Developed risk-based reports and dashboards for client executives, audit committees, and regulatory reviews.
- Contributed to consistent client satisfaction through timely delivery, precision, and audit readiness support.
Technical Consultant
Dynasoft Business Solutions Ltd
Nairobi
01.2021 - 12.2021
- Provided solutions using Microsoft Dynamics 365, Azure, and Microsoft 365.
- Assessed client IT needs and demonstrated ROI of proposed solutions.
- Coordinated with business developers to enhance product features.
Cybersecurity Research Assistant
Multimedia University of Kenya CERT Club
10.2019 - 12.2020
- Contributed to the Serianu Cybersecurity Africa Report (2019).
- Coordinated data privacy research across five African countries.
- Facilitated cybersecurity awareness training for 80+ high school students.
ICT Trainee
National Social Security Fund
Nairobi
05.2019 - 09.2019
- Resolved application issues and enhanced user support processes.
- Ensured adherence to cybersecurity and IT policies.
Education
Bachelor of Business Information Technology - undefined
Multimedia University of Kenya
Kenya Certificate of Secondary Education - undefined
Alliance Girls High School
Skills
- Cybersecurity Audits
- Risk & Controls Assessment
- Data Protection Compliance
- Report Writing & Board Presentations
- Microsoft Azure & Security Tools
- Client Relationship Management
- Stakeholder Engagement
- Leadership & Mentorship
Certification
- Certified Information Systems Auditor (CISA), 2025-05-01
- ISO 27001:2022 Lead Auditor, 2025-06-01
- McKinsey Forward Program, 2024-12-01
- Microsoft Certified Azure Fundamentals, 2022-06-01
- Women in Cyber (Strathmore), 2023-01-01
- CIPIT Data Protection (Strathmore), 2022-03-01
- Huawei HCNA Routing & Switching, 2019-12-01
Affiliations
- ISACA
- SheHacks Kenya
- Women in Tech Africa – Kenya
- MLSA Evolve
- Women in Tech
Timeline
IT Risk Advisory Consultant
Deloitte & Touche LLP
09.2024 - Current
IT Risk Advisory Analyst
Deloitte & Touche LLP
01.2022 - 08.2024
Technical Consultant
Dynasoft Business Solutions Ltd
01.2021 - 12.2021
Cybersecurity Research Assistant
Multimedia University of Kenya CERT Club
10.2019 - 12.2020
ICT Trainee
National Social Security Fund
05.2019 - 09.2019
Bachelor of Business Information Technology - undefined
Multimedia University of Kenya
Kenya Certificate of Secondary Education - undefined
Alliance Girls High School
Similar Profiles
Ankur BhallaAnkur Bhalla
Managing Director – Risk & Financial Advisory, GRC & IT Compliance Leader at Deloitte & Touche LLPManaging Director – Risk & Financial Advisory, GRC & IT Compliance Leader at Deloitte & Touche LLP
Lea Anne AllenLea Anne Allen
Executive Coordinator at DELOITTE & TOUCHE LLPExecutive Coordinator at DELOITTE & TOUCHE LLP
SUJA JAYANSUJA JAYAN
Manager, Accounting, Controls & Reporting Advisor at Deloitte & Touche LLPManager, Accounting, Controls & Reporting Advisor at Deloitte & Touche LLP
Mendy RosenMendy Rosen
Audit and Assurance, Senior Associate at DELOITTE & TOUCHE LLPAudit and Assurance, Senior Associate at DELOITTE & TOUCHE LLP
Kenedy OkelloKenedy Okello
Nursing Officer at Homabay County Referral HospitalNursing Officer at Homabay County Referral Hospital