Cybersecurity & Compliance Consultant - Fractional Technical Lead

About the role

Ravnok builds a cybersecurity and compliance service for Kenyan businesses, helping them become secure, compliant and AI-ready without a large in-house security team. It is looking for an experienced, hands-on consultant to lead technical delivery alongside a founder who handles sales, client relationships and business operations. The engagement is project-based, paid by project fee, based in Nairobi or remotely within Kenya with agreed client visits.

Key responsibilities

• Security and compliance assessment: scope client environments, request evidence, review identity and access, endpoints, email, cloud configuration, data protection, backups, vendors and incident readiness, and produce findings, risk ratings and prioritised recommendations.
• Prepare a practical 30/60/90-day action plan, lead technical presentations and answer client questions.
• Compliance kickstart: turn findings into an implementation plan, implement or coordinate security-control improvements, develop policies, procedures, risk registers and evidence records, and document changes and handover requirements.
• Managed compliance: run scheduled control and access reviews, track vulnerabilities and remediation, maintain evidence records, support vendor reviews, staff awareness and incident-readiness exercises, and prepare periodic reports.
• Escalate incidents and urgent findings within agreed support arrangements.

Required profile

• Demonstrable experience delivering security assessments and implementing improvements.
• Experience with governance, risk and compliance documentation.
• Working knowledge of Kenya's data-protection requirements and familiarity with ISO 27001 or SOC 2 readiness.
• Ability to write strong technical and executive reports, work independently and explain limitations honestly.
• Useful additional experience: Microsoft 365, Google Workspace, AWS, Azure or GCP security; authorised penetration testing or application-security assessments; AI-use governance.

Required skills

• Identity security, cloud or business productivity platforms, endpoint protection, backups and vulnerability management.
• Clear boundaries and responsible escalation to specialists.

To apply, send your CV or LinkedIn profile with two engagement examples, a redacted report sample, availability and preferred commercial arrangement to the company by email.