SM

Stephen Muasya-Msc,Bsc,CISA®

IT Risk,Governance and Compliance Manager at MARA

Stephen Muasya-Msc,Bsc,CISA® has a diverse work experience in the fields of technology, risk management, compliance, and business analysis. Stephen is currently a Member of the World Metaverse Council and YOUNGO, where they play a role in engaging youth in climate technology issues and raising their voice in decision-making processes.

In their previous role as an Information Technology Risk & Compliance Manager at Mara, Stephen led the development and implementation of the company's information security program and ensured the adequacy of security controls for information and technology systems. Stephen also managed the information security compliance program, ensuring adherence to defined requirements, policies, and regulations.

Before that, Stephen worked as a Senior Software Business Analyst, where they executed test scripts, provided diagnosis for incidents, and developed user stories and process flows for software solutions. Stephen also collaborated with business system users and technical teams to propose and provide technical solutions.

At Family Bank Ltd, Stephen served as a Senior Technology Risk Officer, evaluating ICT controls and promoting information security awareness within the Bank. Stephen also proactively identified potential threats and vulnerabilities and provided guidance on effective responses. Additionally, they held the role of Senior Business Banking Analyst, conducting interviews with key business customers, evaluating business intelligence data, and managing project tasks.

Prior to that, Stephen gained experience as a Business Development Specialist at Sidian Bank and as an Internship Trainee-ICT at Kwetu Sacco.

Overall, Stephen Muasya-Msc,Bsc,CISA® has demonstrated expertise in technology, risk management, compliance, and business analysis through their various roles and contributions in different organizations.

Stephen Muasya holds a Masters in Computer Science from the University of Nairobi, which they obtained from 2019 to 2021. Their specialization within the field of study is Information Technology Management. Prior to their master's degree, Stephen completed their undergraduate studies at Kisii University from 2011 to 2015, earning a Bachelor of Science degree in Business Information & Technology Management (BBIM) with a focus on Information Technology.

Stephen also obtained the Certified Information Systems Auditor (CISA) certification from Strathmore University in 2017. In 2022, they pursued further certifications in the field of cybersecurity. Stephen completed a Cyber Security course at the University of London, focusing on cyber security fundamentals. Additionally, they obtained a certificate in data protection from Strathmore University during the same year.

Stephen has also pursued various additional certifications to enhance their skills and knowledge in the IT and cybersecurity domains. Stephen obtained certifications like Cloud Governance from Cybrary, Scrum Fundamentals Certified (SFC) from SCRUMstudy - Accreditation Body for Scrum and Agile, Building and Auditing a Cybersecurity Program from LinkedIn, Lean Six Sigma White Belt Certification from MF Treinamentos, and MS-900 Microsoft 365 Fundamentals-Microsoft 365 security and compliance capabilities from Microsoft, all in 2023. In 2022, they completed certifications such as MITRE ATT&CK Defender™ (MAD) ATT&CK® SOC Assessments from Cybrary, Six Sigma Yellow Belt from SCRUMstudy - Accreditation Body for Scrum and Agile, Cybersecurity Fundamentals-Security management and Governance from the University of London, Machine Learning: Predictive Analysis for Business Decisions from IEEE, and various other certifications related to agile development, cloud architecture, IT service management, and project management from LinkedIn, Google, and Coursera.

Overall, Stephen Muasya has a strong education background in the field of IT and cybersecurity, with a focus on information technology management, certified information systems auditing, and cyber security fundamentals.

Links

Org chart

Timeline

  • IT Risk,Governance and Compliance Manager

    July 1, 2022 - present

View in org chart