Allan Juma

Experience

• 

  Pesa Point kenya

  Feb 2010 - May 2010

  ATM Engineer Intern

  - Software and hardware installation, maintenance and trouble shooting of ATMs in Nanyuki, Nyeri, Nakuru and Molo. - Installing of software on card payment systems

• 

  Britam

  Sept 2014 - Apr 2018

  -Monitor Britam’s networks and environment for security breaches and investigate violations when one occurs.-Performing computer and/or network security vulnerability assessments and scans to identify, evaluate and mitigate security risks, threats and vulnerabilities. -Develop and enforce security standards and best practices for the organization.-Manage network, intrusion detection and prevention systems.-User responsibility access reviews for company applications-Create a Cyber Security Awareness culture in the organization by designing and delivering employee security awareness training both online and class setting.-Ensure organization's systems conform to PCI-DSS and ISO 27001 standards to protect information assets.-Patch Management oversight and reporting.-Coordinate the Disaster Recovery, business continuity planning and regular quality assurance and testing.-Corporate Identity and Access Control Management to ensure proper logical access management of Corporate Information Assets.-Maintain and manage corporate anti-virus.-Prevent data leakages by managing corporate DLP Software. Show less Key Responsibilities:Supporting Britam’s internal clients at all levels as part of a larger helpdesk team. I am in charge of Mt Kenya Region that covers offices in Nyeri, Embu, Meru, Nanyuki, Isiolo and Muranga. ~Act as the region`s central point of contact for ICT security incidents, implement incident handling procedures, report all incidents to the responsible parties and track remedial actions~User awareness and training on IT policies, security, legislation and applications. ~Promote awareness of security practices, processes, procedures and policies in region. ~Ensure compliance with the company’s policies and reporting non-compliance findings to application/process owners.~Support users and assist network administrators, application specialists or vendors over the telephone, email or remote support tools with remediation of issues. ~Providing guidance and assistance to staff in interpretation/clarification of information security policy requirements as well as other company applications~Document procedures, standards, best practices configurations, settings and installation sequence and back out procedures. ~Diagnose, document and remediate unique, nonrecurring/recurring problems associated with application software and operating systems; determine the source of problems and classify their level, priority and nature~Applying patches and software updates/upgrades in accordance with company procedures.~Create alternative methods of completing tasks, remediating user errors and system inconsistencies to improve the desktop team function.~Building stronger relationships between IT department and the users in Mt Kenya region through KYC (Know Your Customer) sessions in all the branches.~Ms Windows installation, troubleshooting, training and repair~Establishing efficient and cost effective travel schedule, accurate weekly report writing and incident reports to supervisors in head office. Show less

  • IT Security Analyst

    Feb 2017 - Apr 2018

  • IT Desktop Support Engineer

    Sept 2014 - Jan 2017
• 

  Jubilee Insurance

  Jun 2018 - Mar 2020

  Security Engineer

  -Monitor networks and environment for security breaches and investigate violations when one occurs.- Manage security appliances such as SIEM, WAF, Firewall, Endpoint protection etc-Performing computer and/or network security vulnerability assessments and scans to identify, evaluate and mitigate security risks, threats and vulnerabilities. -Develop and enforce security standards and best practices for the organization.-Manage network, intrusion detection and prevention systems.-User responsibility access reviews for company applications-Create a Cyber Security Awareness culture in the organization by designing and delivering employee security awareness training both online and class setting.-Ensure organization's systems conform to PCI-DSS and ISO 27001 standards to protect information assets.-Patch Management oversight and reporting.-Coordinate the Disaster Recovery, business continuity planning and regular quality assurance and testing.-Corporate Identity and Access Control Management to ensure proper logical access management of Corporate Information Assets.-Maintain and manage corporate anti-virus.-Prevent data leakages by managing corporate DLP Software. -Manage and secure cloud storage, i.e AWS and Hostgator Show less

• 

  ESET East Africa

  Mar 2020 - Mar 2024

  Technical Lead ESET East Africa

  -Focus on cybersecurity initiatives across a diverse clientele spanning 13 countries in the East and Sub Saharan region.t-Orchestrate the full lifecycle of multiple technical projects, collaborating closely with cross-functional teams, clients, and stakeholders to oversee ESET-related projects from inception to deployment, emphasizing security measures and best practices.- Organize and conduct cyber security awareness & training sessions and webinars for both partners and clients

• 

  ESET Southern Africa

  Mar 2024 - now

  Cyber Security Engineer