Mubarak Fadomula

Cybersecurity Architect · vCISO · Bonn, Germany

Start a consultation
Security architecture that still holds up when regulators, auditors, and attackers all show up at once — Zero Trust architecture, governance, risk & compliance.
Start a consultation
Review the track record
10+ yrs
in cybersecurity
85%
faster incident response (OSC)
50%
fewer app vulnerabilities (FSC)
3
continents delivered on

Education

Graduate cybersecurity training, backed by a computer science foundation.

3
Degrees earned
2
Countries studied in
3.88
Average GPA

Technical MBA in Cybersecurity

Capitol Technology University — Laurel, MD, USA

May 2023 – Aug 2024 · GPA 3.864

Master of Science, Cybersecurity

Capitol Technology University — Laurel, MD, USA

Aug 2021 – Apr 2023 · GPA 3.846

Bachelor of Science, Computer Science

Gulu University — Gulu, Uganda

Feb 2011 – Oct 2014 · GPA 3.93

Experience

A decade-plus building and running security across government, NGO, and enterprise environments.

From humanitarian field offices in active conflict zones to an enterprise Zero Trust programme in Bonn — the through-line is security architecture that has to work under real constraints.

8
Roles held
3
Countries worked in
10+
Years in cybersecurity

CEO, Founder & vCISO

Cyberforge Innovations Limited

  • Founded and lead a cybersecurity and sovereign cloud practice; established an authorised Infomaniak partnership for Swiss sovereign cloud delivery in South Sudan.
  • Design and deploy Zero Trust architectures and managed security services for government and enterprise clients, alongside vCISO advisory.

Feb 2023 – Present
Juba, South Sudan

Cyber Security Manager

FSC Global Development GmbH

  • Architected and executed FSC's enterprise cybersecurity roadmap, implementing Zero Trust architecture and embedding security-by-design across all initiatives.
  • Directed selection and governance of core security technologies (SIEM, firewalls, IDS/IPS, endpoint protection); led Microsoft Sentinel SIEM/SOAR deployment and stood up a 24/7 SOC with a managed detection and response partner.
  • Secured 35+ applications by integrating Secure SDLC, automated vulnerability scanning, and CI/CD security gating — cutting application vulnerability exposure by 50%.
  • Launched a 3-year risk-based security awareness and phishing simulation programme for 400+ employees, reducing human-related risk and increasing incident reporting by 50%.
  • Authored an enterprise AI control framework and the Microsoft Copilot 365 security framework, governing secure AI adoption organization-wide.
  • Cut security incidents by 50% through proactive, threat intelligence-driven blocking; owns the cybersecurity programme budget and third-party risk governance.

Aug 2025 – Present
Bonn, Germany

Information & Cyber Security Specialist

Organisation of Southern Cooperation (OSC)

  • Sole security specialist for OSC's global IT environment; designed and operationalized enterprise security architecture, audits, and vulnerability management.
  • Built and implemented an Incident Response Plan that improved threat-readiness by 70% and cut incident response time by 85%.
  • Architected a centralized incident management platform (TheHive), reducing analyst response time by 40%.
  • Deployed a cloud/on-prem SIEM (Wazuh) and structured vulnerability management programme, reducing system vulnerabilities by 85%.
  • Delivered OWASP and secure-SDLC training to developers, cutting application vulnerabilities by 70%; trained 50+ staff on security awareness, reducing human-related incidents by 20%.

Mar 2023 – Jul 2025
Addis Ababa, Ethiopia

Information Technology Coordinator

Education Development Center (EDC)

  • Deployed secure LAN, servers, and internet gateways for 100+ users across USAID-funded programme sites, achieving a 95% helpdesk SLA resolution rate.
  • Strengthened network security architecture through firewall and antivirus upgrades, cutting system downtime by 90%.

Dec 2022 – Mar 2023
Juba, South Sudan

Information Technology Manager

DT Global Inc. (USAID-funded)

  • Managed IT and security architecture for USAID-funded projects worth $10M+, meeting US government security standards.
  • Cut security incidents by 80% through improved access control, endpoint protection, and monitoring; negotiated vendor contracts for a 55% cost reduction.

Feb 2021 – Nov 2022
Juba, South Sudan

Information Technology Manager

Internews Network

  • Led IT service and security operations for 200+ staff, maintaining 90% network uptime including VSAT services.
  • Implemented disaster recovery and backup architecture that reduced data-loss risk by 40%; cut security incidents by 35% through regular audits and patch deployment.

Apr 2018 – Feb 2021
Juba, South Sudan

Roving Information Technology Officer

International Rescue Committee (IRC)

  • Designed secure network architecture (Cisco ASA firewalls/routers) for humanitarian operations in active conflict zones.
  • Led an Active Directory-integrated wireless authentication rollout across offices, strengthening access control and reducing operational inefficiency by 80%.

Jan 2016 – Mar 2018
Juba, South Sudan

Senior IT Systems Administrator / IT Support Assistant

SSBL – SABMiller plc; UAP Old Mutual Group

  • Designed and maintained LAN/WAN, firewall, and ERP/Active Directory architecture for 200+ users; mitigated a live virus and denial-of-access attack, implementing controls that prevented recurrence.

Oct 2014 – Dec 2015
Juba, South Sudan

Skills & competencies

Four practice areas, from Zero Trust architecture to AI governance.

4
Practice areas
19
Core skills
10
Certifications

Security architecture & Zero Trust

  • Zero Trust design
  • SIEM/SOAR (Sentinel, Wazuh, TheHive)
  • Threat modelling & MITRE ATT&CK
  • Incident response & IRP design
  • Penetration testing (network & web)

Governance, risk & compliance

  • ISO 27001 & NIST CSF
  • GDPR & EU AI Act
  • Security policy authorship
  • Third-party & vendor risk
  • Board & stakeholder communication

Enterprise IT infrastructure

  • Azure cloud & hybrid infrastructure
  • Network architecture (LAN/WAN, Cisco ASA)
  • Application security / DevSecOps
  • Vulnerability management (Qualys VMDR)
  • Multi-site & distributed systems

AI security & governance

  • AI control framework authorship
  • Microsoft Copilot 365 governance
  • AI risk & maturity assessment
  • Regulatory-to-control translation

Certifications

CISSP (Candidate)

Certified in Cybersecurity (ISC2)

PMP (Candidate)

ITIL 4 Foundation

Azure/MCSE (Cloud Platform & Infrastructure)

MCSE (Server Infrastructure)

MCSA

Qualys VMDR

API Security Specialist

AI Security & Governance (Securiti)

Selected projects

Engagements, with the outcome each one was measured against.

4
Engagements delivered
3
Countries
3
Clients
All projects

Writing & publications

Field notes on Zero Trust, AI governance, and running security under constraint.

Practitioner write-ups drawn from live programmes. Eight pieces are published.

8
Published
4
Practice areas covered
All writing

Consultation

Advisory and hands-on engagements, in three areas.

Available for vCISO retainers, fixed-scope architecture and assessment work, and interim security leadership. Based in Bonn; delivering remotely and on three continents.

3
Service pillars
2
Working-day reply
3
Continents served

Start a conversation

Tell me what you’re trying to protect and where you are with it. I’ll reply within two working days.

or email directly