TOM MATOMOLA SANGANDU

• Monitors and analyzes security alerts, logs, and threat intelligence to detect and respond to cyber threats in real time.
• Conducts risk analysis on vulnerability & penetration tests (VAPT) findings & collaborates with InforSec & IT, recommending mitigation strategies aligned with industry standards ISO 27001, ISO 22301.
• Assists in the development and implementation of cybersecurity policies, procedures, and controls to ensure regulatory compliance and protect organizational assets.
• Handles the incident management process, which includes identifying, logging, categorizing, prioritizing, responding to, resolving, and closing incidents, as well as post-incident reviews and lessons learned.
• Performs regular security audits to assess the effectiveness of existing controls.
• Collaborates with cross-functional teams including IT, Legal, and Compliance to integrate security requirements into business operations and projects.
• Produces clear and actionable risk reports for senior management, highlighting trends, critical risks, and recommendations.
• Incident response and business continuity planning efforts, ensuring timely and effective resolution of security incidents.
• Tracks developments in the cybersecurity landscape to keep the organization aware of emerging threats and technologies.
• Utilizes tools such as Fraud Detection, GRC platform, SIEM and data analytics software to support proactive digital risk management.
• Conducts cybersecurity awareness training sessions for members of staff to maintain a security conscious culture.
• Maintains an information security risk register and assist with internal and external audits relating to information security on digital platforms, applications, and business processes.

• Cybersecurity analysis, SIEM technologies, Log Management and Endpoint Detection & Responce
• Built corporate ICT networks and maintained their infrastructure
• Router configurations, firewall configurations and network troubleshooting diagnostics
• Spearheaded the Medismart system implementation in medical facilities
• MySql database installations, configurations and maintenance in medical facilities
• Provided leadership on ICT engagements and technical systems support at healthcare providers
• Facilitated technical training on the Medismart system end-users
• Operating system installations such as Windows servers and desktop/laptop OS installations i.e windows 10, 11
• Antivirus installations and ensuring computer programs and applications were frequently patched up to date and secure
• Hardware installation such as office printers, IP phones and other network devices
• Provided administrative assistance on the claims processing system between insurance companies namely: Prudential Life Assurance, Zsic Life Insurance, Metropolitan (Onelife) Zambia and Medical facilities namely: Coptic hospital, Victoria hospital, Medland hospital, Pearl of Health Hospital
• Managed the call center support and generates monthly reports through Microsoft office tools, tables and data analytic graphs for internal consumption
• Coordinated team members and provided direction on system related operations to be executed on site
• Carried out presentations and system demos during meetings with customers and stakeholders i.e insurance companies namely; Prudential Life Assurance, Metropolitan Onelife Zambia and Hospitals namely; Mums Care Hospital, Lusaka Trust Hospital
• Constantly applied cyber security awareness knowledge and skill that assisted in keeping a secure environment when dealing with emails, usb storage devices, software upgrades and passwords
• Trained staff members to be aware of cybersecurity threats, such as email phishing, social engineering attacks etc.

ADDITIONAL TASKS

□ Prepared and updated the HCP list for all installed clients across Zambia and shares reports with customers and stakeholders

□ Managed and reviewed weekly reports for colleagues in my department

□ Facilitated internal office meetings, announcements and any other business

□ Updated and shared monthly service provider reports: i.e non-compliant system users needing attention and re-training

□ Monitored competitor systems on the market and ensured top notch delivery in customer service

□ Conversant with excel management report writing skills using pivot tables and graphs

□ Able to use system - Sage 300 People to do a self-appraisal and submit for performance review

□ Distributed newly installed facilities running on the Medismart system to colleagues for technical support (Service provider allocation and distribution)

• Installed and configured office programs and applications
• Provided technical assistance to stuff on hardware and software issues
• Assisted in sales of auto-spare products to customers
• Engaging transport officers of various companies and distributing quotations of auto-spares i.e tires, engine oil, etc for their fleet of vehicles
• Working towards monthly targets and generating monthly reports
• Sensitize customers on motor accessories both premium and economic brands
• Follow up on customers to get feedback on auto-spare products and services
• Participate in management meetings of setting up strategies to find new prospects and business partners.

• CCTv surveillance monitoring
• Provided reports of daily surveillance activities
• Summited reports of suspicious actions on site
• Authorized entrance of people and vehicles into estates premise
• Ensured all entry and exit points in the factory premise were secured
• Inspected and patrolled the production site regularly
• Provided monthly reports on security activities and occurrences in the factory premise.