This is my profileContact via CazVid
Geoffrey
Lead Consultant & Director
Contact
Competencies
Demonstrated experience with End-to-End Systems Architecture Assurance.
Demonstrated experience with Data Protection & Privacy Audits.
Demonstrated experience with Cybersecurity & Technical Controls Audit.
Demonstrated experience with Credit System API Integration QA.
Demonstrated experience with Shared CBS & MIS Quality Assurance (35 Modules).
Education
Summary
Lead Consultant & Director open to new opportunities
Experience
Lead Consultant & Director, IT, Regulatory Alignment, QA & Advisory Services
Provide strategic IT risk management, independent systems audit, regulatory alignment, quality assurance, and commercial advisory services to top-tier financial, fintech, SACCO, insurance, and research institutions.. Lead Consultant (Kerali & Associates Limited) on the retainer mandate for Velox Solutions Corporation Limited (Ref: K&A/VELOX/SDIS-MIS/2026-01), directing pre-onboarding regulatory alignment, independent quality assurance across 35 Shared Digital Infrastructure (20 Core Banking System – CBS and 15 Management Information System – MIS) modules, security/load testing, and revenue share model design for SACCOs in Uganda.. Execute multi-tenancy and architectural isolation assessments on shared cloud infrastructure, verifying cryptographic and logical data separation between SACCO tenants, confirming zero cross-tenant data leakage across queries and reporting, and validating tenant-specific parameterisation (interest rates, fees, chart of accounts, and approval limits).. Conduct statutory and regulatory alignment reviews mapping platform controls to the Tier 4 Microfinance Institutions and Money Lenders Act (2016), UMRA Prudential Guidelines (capital adequacy, statutory reserves, liquidity ratios, risk-weighted asset classification), the Cooperative Societies Act (Cap. 112) (permanent share capital, dividend engines, AGM register reporting), and the Data Protection and Privacy Act (2019) & PDPO regulations.. Direct end-to-end functional Quality Assurance (QA) across all 20 CBS modules (CRM, Savings & Deposits, Loan Origination & Management, Portfolio & Collections, Shares, General Ledger & Accounting, Cash/Teller & Vault, AP/AR, Branch Management, Reconciliation, AML/KYC, Credit Risk, Workflow & Approvals, MIS/Regulatory Reporting, Internal Audit, User Access, Document Management, and Product Configuration) and 15 MIS analytics modules (Data Aggregation, Member 360° View, Savings/Credit/Shares/GL Analytics, AML/KYC Risk Monitoring, KPI/KRI Scorecards, Union-Level Consolidated Reporting, Exception Analytics, Alert Workflows, Central Administration, and Enterprise Risk Management).. Validate core financial and credit logic including reducing-balance and flat-rate loan amortisation, savings interest compounding, guarantor locking, credit-committee approval matrices, PAR1/PAR30/PAR90 delinquency classification, IFRS 9 NPL provisioning staging, double-entry GL trial-balance integrity, teller till/vault transfer limits, suspense reconciliation, maker-checker segregation of duties, and immutable audit trails.. Perform authorised non-functional security, performance, and resilience testing in staging environments (under Computer Misuse Act 2011 Rules of Engagement), including SAST/DAST vulnerability assessments of APIs and web portals, multi-tenant penetration testing, peak end-of-month load and concurrency simulations (targeting <2-second response times), and Disaster Recovery (DR) point-in-time recovery and backup verification.. Evaluate local digital ecosystem and third-party API/sandbox integrations across MTN Mobile Money, Airtel Money gateways, NIRA National ID/NIN verification, Credit Reference Bureau (CRB) interfaces, Bank of Uganda National Payment Switch (ISO 20022) workflows, and SMS/email notification engines.. Design commercial Revenue Share Models supported by 5-year Discounted Cash Flow (DCF) Investment Appraisals—mapping CAPEX and recurring OPEX (cloud hosting, integration, messaging gateways, support), structuring alternative SaaS subscription, per-transaction, and interest-income share models, and executing NPV, IRR, payback, and multi-scenario sensitivity analyses aligned with Cooperative Societies Act (Cap. 112) fairness safeguards.. Deliver board- and regulator-ready assurance reports including Compliance Traceability Matrices, 35-Module Functional QA Test Logs and Defect Registers (Critical/High/Medium/Low severity ratings), Multi-Tenant Security & Performance Test Reports, Final QA Audit Certification Reports, and Board Sign-Off Presentations.. Design and audit Data Protection Controls by design (consent, data minimization, access restrictions, and secure retention/disposal protocols) and develop security incident response playbooks and breach readiness protocols.. Direct the end-to-end implementation and continuous support of Wazuh SIEM for threat detection and VAPT, and develop AI Governance frameworks and tailored AI adaptation training.. Key consulting clients and focus areas: Velox Solutions Corporation Limited (via Kerali & Associates Ltd)—regulatory alignment (UMRA/Tier 4/Cap. 112), 35-Module CBS & MIS QA, SAST/DAST & Load Testing, and 5-Year DCF Revenue Share Model Design; Bank of India—IT Risk Management & Systems Audit; SteadFin SACCO—Information Security & Data Controls; Uganda Cooperative Savings & Credit Union (UCSCU)—Information Systems, Shared CBS/NPS & Cybersecurity Audit; Franciscan Investment Cooperative Society Ltd—Cybersecurity Vulnerability Assessments; Hofokam Microfinance—IT Governance & Core System Assurance; Uganda Insurers’ Association—Cybersecurity Advisory & Framework Design; Medical Access Uganda Limited—Third-Party Risk & Infrastructure Assurance; AAR Health Services—IT Strategy & Security Controls; Economic Research Policy Center (Makerere)—Data Protection & Secure Operations; Straight Talk Foundation—Systems Security & Awareness Training.
Manager, Information Systems Security
Develop, refine, and enforce comprehensive information security policies, standards, and guidelines tailored to bank goals, risk tolerance, and evolving threats.. Establish and maintain the Information Security Management System (ISMS) for structured governance, ensuring stringent alignment with ISO 27001, NIST CSF, and data privacy regulations.. Ensure absolute compliance with legal, regulatory, and contractual obligations, taking charge of quarterly cyber reporting to the Bank of Uganda per the 2024 Cyber and Technology Risk Guidelines.. Provide governance support during security incidents; ensure incident response processes match compliance requirements, and integrate post-incident lessons learned into governance improvements.. Develop and enforce third-party security agreements, guaranteeing vendor practices align with organizational risk frameworks and regulatory standards.. Automate the information security reporting dashboard and deliver regular, strategic reports to Executive Management and the Board regarding security posture and compliance.. Pioneered the setup and deployment of a Tier 3 Security Operations Center (SOC); oversee daily operations including proactive threat hunting, vulnerability assessment, and 24/7 security monitoring.
Manager, Information Systems Audit
Evaluated the organization's cybersecurity posture, core banking application controls, and access management against recognized frameworks (NIST, ISO/IEC 27001).. Spearheaded department risk assessment processes in strict accordance with ISO 27001; facilitated regular assessments and tracked the resolution of high-priority risks.. Tested controls identified within the department’s Risk Control Self-Assessment (RCSA) and executed remediation plans to address gaps.. Audited third-party integrations, API dependencies, and Business Continuity/Disaster Recovery (BCP/DR) architectures to mitigate supply-chain risks and ensure system resilience.. Acted as the primary liaison during internal/external audits and regulatory assessments; collaborated with cross-functional teams to resolve findings timely.
Finance Manager
Ensured appropriate internal controls and financial system governance were in place to safeguard company assets.. Prepared financial statements in compliance with IFRS and local legal requirements, managing operational/capital expenditure budgets.
Manager Internal Audit (Information Systems, Finance & Operations)
Provided comprehensive assurance on IT governance, information security, and business processes to ensure bank strategic objectives were met safely.. Conducted rigorous IT risk assessments, reviewed disaster recovery and change management processes, and coordinated follow-ups on Bank of Uganda regulatory recommendations.
Senior Internal Auditor
Executed financial, operational, and underlying IT support system audits, providing critical input into the combined assurance plan.. Conducted continuous control monitoring of key processes utilizing data analytics, demonstrating analytical thinking and inductive reasoning.