Sharon Fazubo

Certified ISO 27001 and ISO 22301 Lead Auditor, Implementer, and Trainer

Salaire / Taux journalier

Harare, Zimbabwe

Freelance, ouvert au CDI

Expertises

ITILCoaching agile

Langues

Anglais (Courant)

À propos

Introduction

Certified ISO 27001 and ISO 22301 Lead Auditor, Implementer, and Trainer with over 15 years of ICT, information security, and compliance experience. Proven expertise in auditing, implementing, and maintaining management systems across diverse organizations, from NGOs to corporates. Skilled in risk assessments, client engagement, audit program delivery, and policy governance. Experienced in both on-site and remote auditing, with a strong ability to communicate findings clearly and support organizations in achieving continual improvement. Currently pursuing CISA and CISSP certifications to complement a strong foundation in cybersecurity, ITIL, and project management (Prince2).

Liens

Expérience de travail

ISO 27001/22301 Lead Auditor & Consultant

TÜV Nord, DQS SA, PECB, MSECB, Cimetrix/ESI, Econet Omni Contact Centre

janv. 2020 - Présent

6 ans 10 mois

À distance

– Conducted ISO 27001 and 22301 audits across multiple industries and countries, delivering certification and surveillance audits. – Performed system security audits to verify compliance with ISO 27001 standards and identified gaps for continual improvement. – Created and executed comprehensive audit plans, checklists, and detailed audit reports. – Led ISMS implementations, including risk assessments, policy and procedure development, and gap analyses. – Delivered ISO awareness and training sessions for staff, enhancing organizational understanding of information security practices. – Spearheaded deployment of ISMS frameworks (ISO 27001/22301) at Econet Omni Contact Centre, Afrosoft Holdings, PSMAS, Champion Insurance, and Standards Association of Zimbabwe. – Worked with cross-functional teams to align ISMS and BCM frameworks with business objectives and regulatory requirements.

ICT Specialist

United Nations Development Programme (UNDP)

janv. 2023 - janv. 2024

1 an 1 mois

Harare, Zimbabwe

– Supported ICT governance including policy drafting, system resilience, and procurement compliance processes. – Oversaw ICT systems for voter registration, GIS, enterprise systems, and communication tools, ensuring compliance with project and regulatory requirements. – Implemented business continuity and disaster recovery measures; trained staff on ICT and compliance processes. – Collaborated with external service providers to ensure quality, compliance, and security in outsourced ICT services.

Information Management Manager

The Halo Trust

janv. 2022 - janv. 2023

1 an 1 mois

Harare, Zimbabwe

– Ensured compliance with Halo Trust global and Mine Action Group reporting standards on demining activities. – Produced accurate maps and clearance statistics in line with donor and authority reporting requirements. – Maintained integrity of clearance data in ArcGIS, GOIMS, and Survey123 databases. – Oversaw ICT function, coordinated phishing/security awareness training, and ensured compliance with IM standards.

Country IT Lead

International Rescue Committee (IRC)

janv. 2021 - janv. 2022

1 an 1 mois

Harare, Zimbabwe

– Ensured compliance with IRC Global Service Management and IT security policies, architecture, and SLAs. – Participated in internal and external security audits; contributed to evidence gathering and remediation planning. – Maintained asset management and IT inventory in compliance with policy and audit requirements. – Tailored IT support and infrastructure deployment across 5 field offices, improving service reliability and compliance. – Successfully closed out 3 field offices and the Zimbabwe national office, aligning with IRC global strategy.

IT Operations Lead

Standards Association of Zimbabwe

janv. 2007 - janv. 2021

14 ans 1 mois

Harare, Zimbabwe

– Oversaw IT operations, system audits, and ISMS/QMS compliance across organizational functions. – Conducted ISO 9001, 27001, and 22301 audits; supported certification maintenance and surveillance audits. – Led the aggressive implementation of SAP enterprise applications, integrating functions and improving efficiency. – Implemented Laboratory Information Management System (LIMS), improving availability and efficiency in laboratory services. – Introduced remote IT systems for certification auditing, training, and governance during COVID to ensure continuity.


Formation

University of Cape Town

Certificate, Data Analysis


Licences et certifications

CISSP (Certified Information Systems Security Professional)

Délivré le : –

Certifié par ISC2

CISA (Certified Information Systems Auditor)

Délivré le : –

Certifié par ISACA

Prince II Foundation & Practitioner

Délivré le : –

ITIL Foundation Certification

Délivré le : –

ISC2 Certified in Cybersecurity (CC)

Délivré le : –

Certifié par ISC2

ISO 27001 Lead Implementer

Délivré le : –

PECB Certified ISO 27001/22301/9001 Lead Auditor & Implementer

Délivré le : –

Certifié par PECB

Le meilleur endroit pour trouver votre prochaine opportunité

© 2026. Tous droits réservés.