Cybersecurity & Compliance Consultant — Fractional Technical Lead

Cybersecurity & Compliance Consultant — Fractional Technical Lead

Company: Ravnok

Location: Nairobi, Kenya / remote within Kenya, with agreed client visits

Engagement: Project-based

Compensation: Project fees

About Ravnok

Ravnok is building a disciplined cybersecurity and compliance service for Kenyan businesses.

Our mission is clear: help businesses become secure, compliant, and AI-ready without needing a large in-house security team.

Our delivery model has three stages:

• Assess — Security & Compliance Assessment.
• Build — Compliance Kickstart.
• Maintain — Managed Compliance.

We are looking for an experienced, hands-on consultant to lead technical delivery alongside a founder responsible for sales, client relationships, and business operations.

Your mission

Turn client concerns into clear findings, practical improvements, and defensible evidence.

We need someone who can assess an environment, explain business risk, implement agreed changes safely, and produce professional documentation.

ResponsibilitiesA. Security & Compliance Assessment

• Scope client environments and prepare evidence requests.
• Review identity and access, endpoints, email, cloud configuration, data protection, backups, vendors, and incident readiness.
• Document what was reviewed, what was not assessed, and any limitations.
• Produce evidence-backed findings, risk ratings, and prioritised recommendations.
• Prepare a practical 30/60/90-day action plan.
• Lead technical presentations and answer client questions.

B. Compliance Kickstart

• Translate assessment findings into an agreed implementation plan.
• Implement or coordinate approved security-control improvements.
• Develop client-specific policies, procedures, risk registers, and evidence records.
• Support access management, MFA, email security, backup verification, and incident planning.
• Document changes, validation results, remaining risks, and handover requirements.
• Support compliance-readiness work within your demonstrated expertise.

C. Managed Compliance

• Conduct scheduled control and access reviews.
• Track vulnerabilities and remediation actions.
• Maintain evidence records and risk registers.
• Support vendor reviews, staff awareness, and incident-readiness exercises.
• Prepare clear periodic reports and contribute to client review meetings.
• Escalate incidents and urgent findings within agreed support arrangements.

Required experience

• Demonstrable experience delivering security assessments and implementing improvements.
• Practical knowledge of identity security, cloud or business productivity platforms, endpoint protection, backups, and vulnerability management.
• Experience with governance, risk, and compliance documentation.
• Working knowledge of Kenya’s data-protection requirements and familiarity with ISO 27001 or SOC 2 readiness.
• Ability to distinguish evidence-backed findings from assumptions.
• Strong technical and executive report-writing skills.
• Ability to work independently and explain limitations honestly.

Useful additional experience

• Microsoft 365, Google Workspace, AWS, Azure, or GCP security.
• Authorised penetration testing or application-security assessments.
• AI-use governance and secure AI adoption.
• Relevant certifications supported by practical experience.

You are not expected to be an expert in every discipline. We value clear boundaries and responsible escalation to specialists.

How we work

• Written scope before access.
• Written authorisation before testing.
• Controlled changes and documented evidence.
• No unsupported claims or fabricated findings.
• No client information in unapproved AI tools.
• Technical sign-off before report release.

How to apply

Send your CV or LinkedIn profile to ravnokcompany@gmail.com, together with:

1. Two relevant engagement examples and your responsibilities.
2. A redacted report sample, or a fictional sample if previous work is confidential.
3. Your availability and preferred commercial arrangement.
4. Relevant qualifications and references, where available.

Shortlisted candidates will complete an interview . Do not submit confidential client information.

Subject: Ravnok — Technical Lead Application