VICTOR WAINAINA NGUNYI

CYBER SECURITY ANALYST || SECURITY OPERATIONS ||PURPLE TEAM OPERATOR || INCIDENT RESPONSE || THREAT HUNTING || PENETRATION TESTER || CLOUD AND NETWORK SECURITY ANALYST || FULLSTACK DEVELOPER (DJANGO) || GRAPHIC DESIGNER ||

About Candidate

Multidisciplinary Cyber Security Analyst and FullStack Developer with extensive experience in threat intelligence, forensic investigation, Root Cause Analysis, ethical hacking, and secure software development. Passionate about fortifying digital infrastructures through penetration testing, policy-making, fraud analysis, and compliance enforcement. Seeking to apply my skillset in a dynamic environment that values both innovation and cybersecurity resilience.

Location

Education

B
Bsc Business Computing 2024
Jomo Kenyatta University of Agriculture and Technology
M
Msc Information Security and Digital Security 2027
University of East London
C
Cyber Threat Intelligence 2024
UDEMY Academy
C
Cloud and Network Security 2024
Cyber Shujaa (USIU)
F
Fullstack Development 2023
UDEMY Academy
W
White-Hat Ethical Hacking 2023
Pirple Academy
C
CCNA 1,2 2022
CISCO- JKUAT Academy

Work & Experience

S
SENIOR CYBER SECURITY OFFICER (CISO) Nov 2025 - To date
CARITAS MF BANK

Architect and execute the bank's enterprise cybersecurity strategy and risk
framework.
• Lead and develop the cybersecurity team while managing the security
program's continuous evolution.
• Direct the bank's cybersecurity risk management and regulatory
compliance program.
• Oversee all security monitoring, threat detection, and incident response
operations.
• Govern the implementation and management of the bank's core security
technology infrastructure.
• Establish and enforce the organization's security governance, policy, and
access control standards.
• Champion the enterprise-wide security awareness and training culture.
• Serve as the primary cybersecurity liaison for all regulators, auditors, and
executive stakeholders.

D
DIRECTOR CRM May 2025 - April 2026
CCK GLOBAL

• Architect and drive the enterprise CRM strategy for the BPO and its clients.
• Lead the delivery and performance of CRM programs for key client
accounts.
Own the management, configuration, and integration of the core CRM
technology platform.
• Transform CRM data into strategic insights to improve client decision
making and customer experience.
• Optimize and standardize CRM processes to scale service delivery and
efficiency.
• Serve as the strategic CRM advisor to senior leadership and key client
stakeholders.
• Build and lead a high-performing team of CRM specialists and analysts.

I
INFORMATION SECURITY ANALYST January 2024 - October 2025
ECLECTICS INTERNATIONAL LIMITED

Conducted comprehensive risk assessments across digital channels:
mobile banking, APIs, USSD, agency, and internet banking.
âš« Performed digital forensic investigations and audit trail analysis on fraud
cases.
âš« Led incident response investigations, analyzing escalated security alerts
and logs.
âš« Executed threat hunting operations to detect, contain, and mitigate
suspicious activity.
âš« Analyzed SIEM logs and network traffic to determine root causes of
incidents.
âš« Provided security tuning recommendations to administrators to close
vulnerabilities.
âš« Coordinated incident communications and escalation in line with CSIRT
protocols.

C
CYBERSECURITY ANALYST AND CONSULTANT August 2023 - to date
Apelles Intlernational Solutions

Led penetration testing and risk mitigation strategies for client web and
network environments
âš« Developed and deployed secure applications with encryption and secure
authentication
âš« Provided cybersecurity awareness sessions and remediation support
âš« Advised on data protection policies, endpoint hardening, and perimeter
security

L
LEAD TECHNICAL CONSULTANT December 2018 - To date
KAG Murang'a Church

Oversaw network infrastructure design and cyber protection for the
church at all levels
Provided ongoing technical guidance, security monitoring, and digital
transformation support

G
Graphic & Web Design Intern January 2023 - May 2023
Kenyatta University Teaching, Research & Referral Hospital (KUTRRH) | Jan

âš« Managed hospital web content (CMS, HMIS), and participated in the
CYBERKNIFE event
âš« Performed network monitoring using FortiGate, and supported VOIP and
domain integration
âš« Conducted incident response and assisted with forensic analysis and
secure printing solutions

Skills

Incident Response & Threat Hunting
98%
Forensics & Log Analysis
98%
Network Security & Defense
98%
Security Assessment & Testing
96%
Regulatory Compliance & Security Controls
96%
ICT Security & Risk Management
98%
IAM & Endpoint Security
98%
Vulnerability & Pen Testing
98%
Risk & Audit
95%