John Moses

• Conduct comprehensive cybersecurity assessments and penetration tests on both cloud and on-premises IT assets.

• Perform web and mobile application security reviews, providing support throughout the development process, from a security perspective

• Ensure compliance with the DevSecOps framework throughout the Software Development Life Cycle (SDLC)

• Collaborate with system administrators, network engineers, and DevOps teams to plan, design, and deploy security measures for the protection of networks, data, database systems, asset access, applications, and Users.

• Collaborate with cross-functional teams to ensure compliance with industry standards and best practices (ISO, CIS, OWASP, NIST, PCI-DSS).

• Track, investigate, and resolve security incidents from detection to resolution.

• Cybersecurity Awareness and On-Boarding Training

• Ensure compliance with ISMS & IMS policies and related control and procedures

• Threat Modelling with emerging security trends in different security operations.

• Develop and implement comprehensive cybersecurity strategies to mitigate risks and ensure regulatory compliance.

• Lead vulnerability assessments and penetration testing for all web and mobile applications while ensuring development best practices are complied with.

• Managing and maintaining IT systems, including servers, networks, and cloud infrastructure.

• Conduct thorough threat analysis to identify potential vulnerabilities and recommend countermeasures.

• Lead incident response efforts to contain and remediate cybersecurity breaches.

• Ensure compliance with relevant cybersecurity regulations, standards, and frameworks.

• Stay up-to-date with emerging threats, technologies, & trends in cybersecurity, analyze and apply this knowledge to improve the organization's cybersecurity.

• Lead and mentor junior cybersecurity analysts/engineers to develop their skills and expertise.