Sam Githinji

Background

About Sam Githinji

A transformational Information Security executive with over 20 years of progressive experience. I have consistently delivered success in developing and directing highly effective Technology Risk Management and Cybersecurity programs. With a strong understanding of business operations, my primary objective is to support business strategies and foster innovation by reducing technology risk and ensuring adherence to regulatory requirements. In collaboration with key stakeholders, I employ a risk-based approach to guide strategic decisions and implement optimized and cost-effective security controls to safeguard data and systems. I excel in reducing risk exposure, developing and refining processes, and delivering exceptional, measurable results.SKILLS & EXPERIENCELeadership• Establishing vision, developing strategies, and ensuring execution• Demonstrating executive presence and effective communication• Influencing and cultivating relationships across all organizational levels• Hiring, coaching, and developing high-performing teams• Administering budgets, managing projects, and resource planning• Promoting continuous improvement and overseeing change management• Ensuring program performance and accountability through metrics - KPIs/KRIsCybersecurity & IT Risk Management• Expertise in cybersecurity risk management, including methodologies, identification, assessment, mitigation, monitoring, and reporting. Skilled in articulating risk reduction strategies and providing advice to both technology and business stakeholders• Proven experience in developing and leading security programs, including strategy, governance and policy development utilizing multiple frameworks• Experienced in security architecture, creating roadmaps to mitigate risk, safeguard data, and enhance systems and applications availability• Leadership in security operations, including the SOC, incident response, forensics, threat intelligence, vulnerability management, attack surface management and security awareness training• Expertise in operational resilience, including disaster recovery and business continuity programs• Proficiency in audits and regulatory compliance, overseeing audits and corrective action planning• Experience in third-party risk management (TPRM), including reviews, risk assessments, remediation, and monitoring• Comprehensive knowledge in Identity and Access Management (IAM), including strategy development, technology implementation, and role-based access controlFrameworks & Industry StandardsNIST, ISO, SCF, CIS, HITRUST, HIPAA, HITECH, PCI, GDPR, CSA