Shingirai Shantelle Kamwendo
House Number 46, Chatambudza Drive, Zengeza 5, Chitungwiza
Summary
Highly motivated cybersecurity consultant with 4 years of experience in data analytics, risk management, and vulnerability assessments. Proven ability to lead client engagements and deliver exceptional service across diverse industries, including banking, healthcare, mining, and general services. Expertise in leveraging data analysis for informed decision-making and mitigating cyber threats. Prior experience at Ernst & Young as a Senior Cybersecurity Consultant and Data Protection Officer honed skills in client communication, collaboration, and technical proficiency. Hands-on experience with Python programming and web APIs gained through internships at Dimension Data and HITRAC.
Overview
5
5
years of professional experience
1
1
Certification
Work History
SENIOR CYBERSECURITY CONSULTANT
ERNST AND YOUNG (ZIMBABWE)
05.2021 - 12.2023
- Participating in Client Kickoff Meetings for several client projects with team members and stakeholders
- Led the team in Internal and External vulnerability Assessment projects which included Information Gathering, OSINT using Maltego, Web Application Penetration testing using the OWASP top 10 standard and Nessus
- Checking for outdated Operating systems patches, secure system configurations
- Operating system Configuration Reviews, Windows OS, checking for outdated system patches
- Active Directory penetration testing, checking for security loopholes
- Physical Data Centre Reviews reviewing physical and internal security controls and implementation of security controls
- Conduct compliance and management audits, ISO 2700, NIST Cybersecurity Framework and Data Privacy and Impact Assessments
- Conducted Operational Technology reviews for one of the biggest mining companies in Zimbabwe, Reviewing their technology, checking security flaws and offering recommendations to the client for business continuity
- Carrying IT audit controls, database and operating system reviews for clients in Botswana and Zambia
- Led Social Engineering assignments for clients and giving recommendations on how to mitigate social engineering attacks.
- Documenting Penetration Testing Reports for clients providing detailed business impact analysis and recommendations.
DATA ANALYST
BAKER TILLY
10.2020 - 03.2021
- Collecting data for different client projects
- Data Cleaning, Interpreting Data, Reporting results for collected client data
- Created Data Visualization using PowerBi
- Analyzing Network Data on Wireshark and Splunk to analyze patterns, and network protocols, and checking for anomalies on a client’s network.
JUNIOR SOFTWARE DEVELOPER INTERN
HITRAC
04.2019 - 09.2019
- Participated in developing the front-end mobile application using Flutter, for a health system used in collecting health data for the Ministry of Health Zimbabwe project
- Uploading work on GitLab
- System design documentation.
PYTHON PROGRAMMER INTERN
DIMENSION DATA (REMOTE)
09.2018 - 03.2019
- Python programming using Web Api's to extract Data for a learning platform project
- Automating organizational tasks using Python scripts to manage data.
Education
BACHELORS IN TECHNOLOGY HONOURS DEGREE IN INFORMATION SECURITY AND ASSURANCE -
HARARE INSTITUTE OF TECHNOLOGY
08.2020
Skills
- Ability to quickly learn new areas of the business by applying a solid foundation and understanding of internal controls and general business practices
- Ability to build good working relationships with auditees and key stakeholders, and to work within a multicultural team
- Strong Cybersecurity background with ethical hacking, vulnerability assessments and penetration testing
- Ability to interact and drive conversations with non-technologists, demonstrating the benefits of integrated technology-led audits
- Proficiency in risk assessment approaches and methodologies
- Strong knowledge of IT Audit internal controls with subject matter expertise in Information Security
- Working on multiple engagements, ensuring the delivery of high-quality work within the deadline and budget
- Strong proficiency in basic PC applications (Excel, Word, PowerPoint)
- Project management skills to keep track of progress, and escalating issues at the right time
- Ability to work under pressure across a portfolio of clients
- Proficient in Python programming language, and using Python scripts to conduct security exploits
Accomplishments
In 2021 I had an opportunity to get featured in Zimbabwe's local newspaper for a Social Engineering article titled "Social Engineering Attacks: A path to Ransomware", which was focused on educating organizations on social engineering and ransomware.
Certification
- Bachelors in technology Honors Degree in Information Security and Assurance with a Merit (2.1 Degree class) Harare Institute of Technology
- Information Security Associate, SkillFront
- Common Cybersecurity Attacks and Defense Strategies, EC Council
Tryhackmeportfolio
https://tryhackme.com/p/peachpy
References
Available upon request
Timeline
SENIOR CYBERSECURITY CONSULTANT
ERNST AND YOUNG (ZIMBABWE)
05.2021 - 12.2023
DATA ANALYST
BAKER TILLY
10.2020 - 03.2021
JUNIOR SOFTWARE DEVELOPER INTERN
HITRAC
04.2019 - 09.2019
PYTHON PROGRAMMER INTERN
DIMENSION DATA (REMOTE)
09.2018 - 03.2019
BACHELORS IN TECHNOLOGY HONOURS DEGREE IN INFORMATION SECURITY AND ASSURANCE -
HARARE INSTITUTE OF TECHNOLOGY
Similar Profiles
Nimrod MoyoNimrod Moyo
INFORMATION SYSTEM SECURITY ENGINEER at ERNST & YOUNG (EY) ZIMBABWEINFORMATION SYSTEM SECURITY ENGINEER at ERNST & YOUNG (EY) ZIMBABWE
Ronald MarambakuwandaRonald Marambakuwanda
Prison officer at ZimbabwePrison officer at Zimbabwe
Venketesan k.kVenketesan k.k
Project Consultant at Ernst YoungProject Consultant at Ernst Young
Washington MachimbidzofaWashington Machimbidzofa
Pizza Chef at Roman's PizzaPizza Chef at Roman's Pizza
Elias MuchazorekaElias Muchazoreka
Sales RAD at Coca-ColaSales RAD at Coca-Cola