Available for consulting engagements

// IT Governance · Risk · Compliance Specialist

Securing enterprises through ISO 27001 frameworks, proactive risk management, and cutting-edge cybersecurity assurance across East Africa and beyond.

GRC Specialist VAPT Expert ISO 27001 Lead Auditor SOC Analyst
Explore My Work Get In Touch
0+ Certifications
0+ Years Experience
0+ Major Projects
Scroll
01 / About

The Person Behind the Protocol

Arafat Luzinda - GRC & Cybersecurity Specialist
Kampala, Uganda
luzinda-arafat
aluzinda@proton.me
+256-750-704-562

I am a Cybersecurity GRC Specialist with deep expertise in securing financial institutions, critical infrastructure, and enterprise environments across East Africa.

With hands-on experience implementing SIEM solutions, leading PCI DSS certifications, deploying Privileged Access Management (PAM) systems, and conducting comprehensive VAPT assessments, I bridge the gap between technical security and strategic business risk.

My approach integrates internationally recognized frameworks — ISO/IEC 27001, ISO/IEC 27701, and ISO/IEC 42001 — with practical, ground-level implementation to drive measurable organizational resilience.

GRC Leadership

Risk frameworks, audit programs, compliance monitoring

Offensive Security

VAPT, ethical hacking, API penetration testing

SOC Operations

SIEM deployment, threat hunting, incident response

Security Awareness

ICT training programs, phishing simulations, user education

02 / Expertise

Core Competencies

Governance, Risk & Compliance

ISO 27001/27701/42001 implementation, audit programs, risk registers, regulatory alignment

ISO 27001NISTPCI DSS

IT Security Project Management

Cybersecurity program design, stakeholder alignment, security roadmaps and governance charters

AgilePRINCE2ITIL

Vulnerability & Penetration Testing

Web application VAPT, API security testing, network pen tests, red team engagements

OWASPBurp SuiteMetasploit

SOC Management & SIEM

Security operations center setup, Wazuh/SIEM deployment, threat hunting, log analysis

WazuhSplunkELK Stack

Network Security Management

Firewall policy, IDS/IPS configuration, network segmentation, VPN and Zero Trust architecture

FortiGateCiscoZero Trust

Privileged Access Management

PAM implementation (Arcon), session monitoring, credential vaulting, least privilege enforcement

Arcon PAMCyberArkIAM

Linux & Windows Security

OS hardening, endpoint security configuration, Endpoint Central deployment, patch management

Kali LinuxUbuntuWindows Server

ICT Security Training & Awareness

Security awareness campaigns, phishing simulations, management reporting, board-level briefings

KnowBe4TrainingSimulation
03 / Projects

High-Impact Engagements

Tropical Bank Uganda Commercial Banking
Delivered
  • E-Channel Digital Banking Project

    Led security assurance for USSD, Mobile App, Internet Banking, and E-KYC platforms serving retail customers

  • PCI DSS Certification

    Drove end-to-end Payment Card Industry Data Security Standard compliance program

  • MIS System Implementation

    Secured Management Information System rollout with access controls and data classification

  • T24 Financial Crime Mitigation (FCM)

    Security oversight for Temenos T24 FCM system reducing financial fraud exposure

BRAC Bank Microfinance & Development Banking
Delivered
  • PAM Implementation (Arcon)

    Deployed Privileged Access Management platform controlling 200+ privileged accounts across the bank

  • Endpoint Central Deployment

    Enterprise-wide endpoint management and patch automation reducing vulnerability exposure by 60%

  • SIEM Implementation (Wazuh)

    Deployed open-source SIEM with custom detection rules, dashboards and 24/7 alerting

  • Digital Field Agent VAPT

    Comprehensive mobile application penetration testing for field agent banking platforms

04 / Certifications

Professional Credentials

25 verified badges across cybersecurity, GRC, cloud, and API security — validated on Credly

Premium Credentials
ISC2 Candidate
ISO/IEC 27001:2022 Lead Auditor
ISO/IEC 27701:2025 Lead Auditor
ISO/IEC 42001:2023 Lead Auditor
Fellow — Management Systems Auditing
Fortinet Certified Associate Cybersecurity
Google Cybersecurity Professional Certificate
Cisco Networking Academy
Ethical Hacker
Junior Cybersecurity Analyst
Cyber Threat Management
Endpoint Security
Network Defense
Introduction to Cybersecurity
Fortinet & API Security
FortiGate 7.4 Operator
Intro to Threat Landscape
API Penetration Testing
OWASP API Security Top 10
API Security Fundamentals
Securing LLM & NLP APIs
IBM · Linux Foundation · OPSWAT
Cloud Computing Fundamentals
Cybersecurity Fundamentals (IBM)
Introduction to Kubernetes
Open Source in Finance
Inclusive Open Source Strategies
Critical Infrastructure Protection
View All 25 Verified Badges on Credly
05 / Media

Chizzoh TechTalk

Breaking down complex cybersecurity concepts for everyone — from boardrooms to classrooms

Chizzoh TechTalk

A community-driven tech education platform where cybersecurity meets accessibility. Covering threat intelligence, GRC insights, career advice, and the latest in tech — in a language everyone understands.

YouTube
YouTube @ChizzohTechTalk

In-depth tutorials, career guides, cybersecurity walkthroughs & product reviews
TikTok
TikTok @ChizzohTechTalk

Bite-sized security tips, trending tech news & quick explainers
06 / Contact

Start a Conversation

Whether it's a security audit, a consulting engagement, or a collaboration — I'm ready to help.

Get In Touch

Based in Kampala, Uganda — working with clients across East Africa, Europe, and beyond. Let's talk security.

Location Kampala, Uganda
Phone / WhatsApp +256-750-704-562