Alfie Njeru

Technology & Cybersecurity Executive · 13+ Years Across Regulated & Mission-Critical Environments

Executive Leadership Backed by Practitioner Depth

Leading multidisciplinary technology functions across cybersecurity, enterprise solutions, managed services and data analytics, with experience advising boards and executives, shaping technology products, supporting commercial growth and delivering in complex regulated environments.

From Technical Depth to
Enterprise Technology Leadership

A career spanning consulting, telecommunications, banking, regional assurance and multidisciplinary technology leadership.

October 2024 – Present

Director, Technology Services

Salaam Technology Limited

Provides strategic leadership across Security Operations & Managed Security Services, Security Assurance & Audit, Enterprise Technology Solutions, and Data Analytics. Leads multidisciplinary teams and approximately 20 concurrent initiatives while advising senior stakeholders, supporting technical pre-sales and spearheading internally developed technology platforms.

April 2023 – October 2024

Senior Manager, Cybersecurity Audit

Led group-wide cybersecurity audit and technology risk assurance, directed complex risk-based reviews, presented material risks and remediation priorities to executive and board-level stakeholders, and developed cybersecurity audit capability across the Group.

April 2022 – April 2023

Audit Manager, Technology & Operations – Africa & Middle East

Provided regional leadership for multi-country technology and operational risk assurance across Africa and the Middle East, covering cybersecurity, resilience, governance and complex technology control environments.

June 2018 – April 2022

Information Systems Auditor

Led and delivered cybersecurity and technology control assessments across enterprise applications, infrastructure, digital channels, identity systems, databases and security operations within a regulated banking environment.

July 2016 – June 2018

Technology Security Assurance Engineer

Provided security assurance for mission-critical digital platforms, reviewed new systems and external integrations, advised engineering teams on secure design and contributed to ISO/IEC 27001 ISMS recertification as an internal lead auditor.

September 2013 – July 2016

Senior Associate, Risk Assurance / IT Advisory

Delivered technology risk, cybersecurity, IT audit and governance advisory work across enterprise and public-sector organisations, establishing the consulting and assurance foundation for later executive roles.

Executive Perspective.
Technical Credibility.

Formal business, governance and delivery credentials reinforced by active contribution to the global cybersecurity profession.

Education

Master of Business Administration

BEng, Electrical & Electronics Engineering

Professional

CISM · CISA · PMP · CISSO · AI Security and Governance Certified · CCEP · CCSK · AWS CCP · ISO 27001:2013 ISMS Internal Auditor · GRCP · CPTE

Security leadership, assurance and programme delivery credentials.

Industry Leadership

MITRE ATT&CK Evaluations CAB

Member of the Community Advisory Board supporting the ATT&CK Evaluations ecosystem.

Professional Development

Accredited ISACA Trainer

Cybersecurity educator and trainer, complemented by ISO/IEC 27001 Lead Auditor, CCSK and AWS cloud credentials.

Full List of Recognitions

Click any card to view the official acknowledgement page.

Other Public Programs

Additional organisations where I've received hall of fame recognition or bounties.

Huawei Uber Sony Adobe US Dept. of Defense Singapore Government Dutch Government AT&T Ford IBM Equifax General Motors Capital One Western Union Marriott Hotels MTN Group Vercel Zoho ABN Amro Bank Bitdefender Zynga 8x8 Solidus Segment HealthifyMe

In the News

Training & Publications

CCSK v5 Training Reviewer

Certificate of Cloud Security Knowledge (CCSK) v5, serving as a Cloud Security Alliance training course reviewer.

View

Windows Security Auditing

Published course on Pentest Magazine covering Windows security auditing techniques and methodologies.

View

Exploit-DB Contributions

Google Hacking Database (GHDB) entries and published exploits on Exploit-DB.

GHDB    Exploits

Key Accomplishments

Africa's First Ambassador

First Bugcrowd and HackerOne Ambassador from Africa, representing the continent in global bug bounty programmes.

50+ Hall of Fame Awards

Recognised by Microsoft, BBC, Oracle, Dell, Nokia, Siemens, United Nations, JP Morgan, BMW, Philips, Ericsson, and more.

Published CVE

Published CVE-2017-14135, a Remote Code Execution in OpenDreamBox. Referenced across NVD, MITRE, VulDB, and JVN.

Big Four Experience

Built expertise at PwC and KPMG, two of the world's largest professional services firms.

Open Source Tools

Created multiple security auditing tools on GitHub: FortiGate, Cisco, Nix Auditor, and Password Complexity Check.

Global Impact

13+ years securing organisations across Africa, Middle East, and international markets. Featured in HackerOne's 2021 report.

Ready to Work Together?

Whether you need a security assessment, consulting, or a long-term security partner, let's talk.