
Sharon Fazubo
Certified ISO 27001 and ISO 22301 Lead Auditor, Implementer, and Trainer
Salaire / Taux journalier
Harare, Zimbabwe
Freelance, ouvert au CDI
Expertises
Langues
À propos
Introduction
Certified ISO 27001 and ISO 22301 Lead Auditor, Implementer, and Trainer with over 15 years of ICT, information security, and compliance experience. Proven expertise in auditing, implementing, and maintaining management systems across diverse organizations, from NGOs to corporates. Skilled in risk assessments, client engagement, audit program delivery, and policy governance. Experienced in both on-site and remote auditing, with a strong ability to communicate findings clearly and support organizations in achieving continual improvement. Currently pursuing CISA and CISSP certifications to complement a strong foundation in cybersecurity, ITIL, and project management (Prince2).
Expérience de travail
ISO 27001/22301 Lead Auditor & Consultant
TÜV Nord, DQS SA, PECB, MSECB, Cimetrix/ESI, Econet Omni Contact Centre
janv. 2020 - Présent
6 ans 10 mois
À distance
– Conducted ISO 27001 and 22301 audits across multiple industries and countries, delivering certification and surveillance audits. – Performed system security audits to verify compliance with ISO 27001 standards and identified gaps for continual improvement. – Created and executed comprehensive audit plans, checklists, and detailed audit reports. – Led ISMS implementations, including risk assessments, policy and procedure development, and gap analyses. – Delivered ISO awareness and training sessions for staff, enhancing organizational understanding of information security practices. – Spearheaded deployment of ISMS frameworks (ISO 27001/22301) at Econet Omni Contact Centre, Afrosoft Holdings, PSMAS, Champion Insurance, and Standards Association of Zimbabwe. – Worked with cross-functional teams to align ISMS and BCM frameworks with business objectives and regulatory requirements.
ICT Specialist
United Nations Development Programme (UNDP)
janv. 2023 - janv. 2024
1 an 1 mois
Harare, Zimbabwe
– Supported ICT governance including policy drafting, system resilience, and procurement compliance processes. – Oversaw ICT systems for voter registration, GIS, enterprise systems, and communication tools, ensuring compliance with project and regulatory requirements. – Implemented business continuity and disaster recovery measures; trained staff on ICT and compliance processes. – Collaborated with external service providers to ensure quality, compliance, and security in outsourced ICT services.
Information Management Manager
The Halo Trust
janv. 2022 - janv. 2023
1 an 1 mois
Harare, Zimbabwe
– Ensured compliance with Halo Trust global and Mine Action Group reporting standards on demining activities. – Produced accurate maps and clearance statistics in line with donor and authority reporting requirements. – Maintained integrity of clearance data in ArcGIS, GOIMS, and Survey123 databases. – Oversaw ICT function, coordinated phishing/security awareness training, and ensured compliance with IM standards.
Country IT Lead
International Rescue Committee (IRC)
janv. 2021 - janv. 2022
1 an 1 mois
Harare, Zimbabwe
– Ensured compliance with IRC Global Service Management and IT security policies, architecture, and SLAs. – Participated in internal and external security audits; contributed to evidence gathering and remediation planning. – Maintained asset management and IT inventory in compliance with policy and audit requirements. – Tailored IT support and infrastructure deployment across 5 field offices, improving service reliability and compliance. – Successfully closed out 3 field offices and the Zimbabwe national office, aligning with IRC global strategy.
IT Operations Lead
Standards Association of Zimbabwe
janv. 2007 - janv. 2021
14 ans 1 mois
Harare, Zimbabwe
– Oversaw IT operations, system audits, and ISMS/QMS compliance across organizational functions. – Conducted ISO 9001, 27001, and 22301 audits; supported certification maintenance and surveillance audits. – Led the aggressive implementation of SAP enterprise applications, integrating functions and improving efficiency. – Implemented Laboratory Information Management System (LIMS), improving availability and efficiency in laboratory services. – Introduced remote IT systems for certification auditing, training, and governance during COVID to ensure continuity.
Formation
University of Cape Town
Certificate, Data Analysis
Licences et certifications
CISSP (Certified Information Systems Security Professional)
Délivré le : –
CISA (Certified Information Systems Auditor)
Délivré le : –
Prince II Foundation & Practitioner
Délivré le : –
ITIL Foundation Certification
Délivré le : –
ISC2 Certified in Cybersecurity (CC)
Délivré le : –
ISO 27001 Lead Implementer
Délivré le : –
PECB Certified ISO 27001/22301/9001 Lead Auditor & Implementer
Délivré le : –