Chris Munhuweyi

Leading and performing various roles for clients as an experienced cyber security consultant and subject matter expert. A highlight of some of the projects include: o A security transformation project for a client in the public sector which included performing security assessments, developing roadmaps and security transformation projects and coming up with a target operating model. o Performing a Zero Trust Cyber Security Architecture review and design for a client in the manufacturing sector, with OT environments in scope. o Implementation of an ISMS as a GRC security consultant in line with ISO 27001. o Enterprise and Domain architecture work o Performing compliance reviews and cyber security audits.

• Setting up the Information Security GRC function and supporting processes • Implementing an effective ISMS, which includes developing all the information security standards to support the information security policy, and various other artefacts. • Ensuring that GRC activities are embedded across different parts of the business successfully on a business-as-usual basis across the firm, acting as a subject matter expert. • Overseeing security project management work. • Audit coordination and support • Input into security architecture designs • Planning compliance testing activities for security standards • Being the focal point for responding to RFPs

• Performing information security officer roles for CNBC International and NBC News International, with responsibility for all cyber security domains, successfully setting relevant processes. • Cyber security lead for all major events for the two businesses, including international events, ensuring appropriate controls are properly in place. • Subject matter across the two companies for information security matters • Reporting and providing support to the global information officer based in the US. • Security awareness campaigns.

Performing and managing information security projects, and have performed work around the following: • ISMS implementation (in line with ISO27001 and other standards). • Security Capability Assessments, using NIST, ISO 27001, ISF, SANS etc • Security Assurance and Control • Vulnerability Management • Security Design and Architecture • Identity and Access Management • Information Risk Management • Security Policy Review and Formulation • Supplier Security Risk Management • Compliance Reviews - GRC Technology • Application Security Reviews • Security Culture and Awareness • Crisis Management • Business Continuity • Privacy & Data Protection –PCI DSS, DPA, GDPR • Security Development Lifecycle • Strategy and Portfolio Management Also lead cyber assurance work in the private sector including cyber audits and assessments.

Christopher performed Information Protection and Business Resilience projects, mostly in the Financial Services sector, and performed work around the following: • Security Capability Assessments • Security Assurance and Control • Security Operations Centre (SOC) Service Design • Identity and Access Management (IAM) Governance • Information Risk Management • Compliance Reviews - GRC Technology • Application Security Reviews • IT Audits covering security and operational controls • Data Analysis around data migration and interface integrity

Christopher led information risk management, cyber security and specialist IT advisory projects/assignments, mostly in the Financial Services (FS) and Insurance industries at KPMG Nigeria and KPMG Zimbabwe