CISACertified Information Systems Auditor
CISMCertified Information Security Manager
CRISCCertified in Risk and Information Systems Control
CCCertified in Cybersecurity · ISC2
MBCSProfessional membership · BCS
ISO 27001:2022Internal Auditor · BSIScuba diving & travel
Time underwater and exploring new places.
SECURITY IS A BUSINESS DECISION
Malcolm Kafesu.
Cybersecurity.
Leadership.
Trust.
Cybersecurity leader, speaker and mentor. I connect governance and technology with people, business priorities and executive decisions.
BASED IN VICTORIA FALLS, ZIMBABWE
Experience across UK and international markets
GROUNDED IN PRACTICE
01 / THE PERSPECTIVE
Connecting the
boardroom to
everyday decisions.
Strong governance starts with clear ownership. Resilience grows when people understand their role.
My work brings together security leadership, commercial strategy and organisational culture. I have led cybersecurity operations, developed governance programmes in regulated aerospace, and supported international technology growth.
Today, as Director of Client Growth & Technology at ZimWorX Technologies, I connect healthcare and dental organisations with technology services aligned to their operational needs.
Alongside my leadership work, I mentor people developing their careers in cybersecurity and technology, speak about human risk and executive accountability, write The Human Firewall™ Weekly, and serve on the University of Wolverhampton’s Industry Advisory Board.
Connect on LinkedIn ↗THE PERSON BEHIND THE WORK
From grief
to growth.
A journey of sacrifice, reinvention and purpose.
The photograph from my original personal story.
Before the qualifications and leadership roles came family responsibilities, difficult decisions and the determination to begin again.
Responsibility came early
I lost my father at sixteen, while waiting for my O-level results. As the eldest of six boys, with my mother expecting our youngest sibling, I took a job at my father’s former workplace to help support the family. My ambition to become a pilot gave way to more immediate responsibilities.
A new direction
A COBOL programming course introduced me to technology. I later co-founded a small technology business with my brother. Economic pressures in Zimbabwe eventually led me to seek a future in the UK.
At twenty-six, I left behind my pregnant wife, our four-year-old daughter, my mother and my brothers. Warehouse work, IT support and night shifts helped me support loved ones while rebuilding my life.
Returning to education
As a mature student, I studied full-time for a cybersecurity degree while raising a family. CISA, CISM and CRISC followed, alongside a career in cybersecurity leadership.
Helping my family join me in the UK became one of my proudest achievements. The experience of loss, migration and starting again also gave me a reason to mentor others finding their own way forward.
Family, faith and resilience remain central to my story. Those experiences shape how I lead, support others and approach responsibility.
BEYOND THE WORK
A little more
about me.
Away from technology and cybersecurity, I enjoy scuba diving, travel, music, football and Formula One.
Music
A favourite part of life away from work.
Football
A Liverpool supporter, with memories from the stands.
Formula One
Following the racing throughout the season.
WHERE I CONTRIBUTE
Three disciplines.
One business perspective.
Governance
& resilience
Making risk visible, clarifying accountability and connecting assurance with business decisions.
People
& security culture
Helping leaders move from awareness campaigns to trust, practical behaviour and shared responsibility.
Technology
& client growth
Aligning technology capability, service delivery and commercial priorities across international markets.
02 / SELECTED EXPERIENCE
Leadership built
through delivery.
Director of Client Growth & Technology
Leading international client growth and technology conversations across healthcare, dental and enterprise markets. Connecting executive priorities with managed IT, cybersecurity and digital transformation services.
IT Security & Governance Manager
Developed security governance, risk management and supplier assurance programmes. Advanced control mapping, internal audit and CMMC readiness activities.
Cybersecurity Operations Manager
Previously IT Governance Officer
Built and led the cybersecurity function. Delivered ISO 27001:2022 certification and Cyber Essentials recertification, with a focus on operational resilience and security culture.
RECOGNITION & EDUCATION
03 / ON STAGE & IN CONVERSATION
Cybersecurity
speaker.
Business perspective.
Practical perspectives for executives, security teams and professional communities. Keynotes, panel discussions and leadership conversations.
Invite me to speak ↗SELECTED SPEAKING ENGAGEMENTS
Richmond Cyber Security Forum
Transformational CISO Europe Assembly
ISACA Central UK
SPEAKING THEMES
01The Human Firewall™+
Why security culture depends on leadership, trust and everyday behaviour. A discussion of shared responsibility beyond annual training.
02Boards & consequences+
Connecting cyber risk with executive accountability. How leaders ask better questions, establish ownership and make informed decisions.
03GRC beyond the checklist+
Moving governance, risk and compliance into daily business practice, with clear priorities and evidence of effective controls.
04Technology with business purpose+
Aligning technology investment and service capacity with operational priorities, customer needs and sustainable growth.
04 / IDEAS INTO PRACTICE
A perspective
worth discussing.
THE WEEKLY / MALCOLM KAFESUNEWSLETTER · LINKEDIN
The Human Firewall™ Weekly
Perspectives on security culture, leadership and the human decisions behind organisational resilience.
Explore my writing on LinkedIn ↗PUBLISHED IN ISACA NOW
Three Primary Reasons Why GRC Is Failing
And How to Fix It
My published perspective on the barriers holding governance, risk and compliance back.
Read the article ↗CYBERBAE / YOUTUBECYBERSECURITY AWARENESS
Awareness starts
with people.
CyberBae - The Human Firewall™
My YouTube channel focuses on cybersecurity awareness. Join me for conversations about the human side of staying secure.
Watch CyberBae on YouTube ↗@CyberBaeHumanFirewall
MENTORSHIP / CAREER & PERSONAL DEVELOPMENT
Cybersecurity mentorship.
Plan your next step.
I offer individual mentorship for people developing their careers in cybersecurity, governance, risk, compliance and technology.
I know the demands of changing careers, returning to education and building professional confidence. My approach starts with your experience, values and ambitions, then turns those conversations into practical next steps.
10+
Ask about mentorship ↗People supported through individual
mentorship and career guidance
Start with a short introduction, your goals and the support you’re seeking. We’ll discuss fit, availability and next steps.
WHERE I OFFER SUPPORT
Career direction & transitions
Explore routes into cybersecurity and technology. Identify transferable skills, priorities and a realistic development plan.
GRC & professional development
Build your understanding of governance, risk and compliance. Discuss learning priorities and certification choices in the context of your goals.
CV & LinkedIn positioning
Present your experience clearly. Strengthen your professional profile and explain the value of your skills to employers.
Confidence & accountability
Reflect on your strengths, values and ambitions. Expect honest feedback, practical exercises and ownership of your progress.
How we work together
Understand your starting point. Agree a focus. Put learning into practice. Review your progress.
RECEIVED ON LINKEDIN
8 professional recommendations
In the words of
people I’ve worked with.
Perspectives from colleagues, collaborators and educators. Original recommendations, shared with their authors’ wording and dates.
I’ve worked closely with Malcolm and can confidently say he is a highly credible cybersecurity leader with strong technical depth and executive judgement. He translates complex cyber risk, security, and compliance issues into clear, actionable insights for senior leaders and boards, particularly under pressure.
Read full recommendation
Malcolm has led and matured cybersecurity and GRC functions across incident response, vulnerability management, IAM, data protection, and third-party risk, working to frameworks such as ISO 27001 and NIST. He has hands-on experience with enterprise security platforms including EDR, DLP, and cloud security controls.
With a people-first leadership style and strong risk-based thinking, Malcolm is well suited to Head of Cybersecurity, Head of GRC, or CISO roles.
I’ve had the pleasure of knowing and working with Malcolm for over 20 years, and in that time we’ve worn many hats together — colleagues, project partners, and even friends outside of work.
Read full recommendation
What’s always stood out to me is Malcolm’s natural leadership and reliability. He has that rare ability to bring people together and keep everyone moving in the same direction. On one particular IT work project, his calm approach and teamwork skills really helped to gel the team, lifting morale and making sure we not only hit our goals but enjoyed the process along the way.
Malcolm is someone you can always count on — whether it’s driving a project forward or supporting the people around him. He’s a genuine team player and a true asset to any business or group lucky enough to have him.
Malcom is a professional with a sense of quality. He is rigorous in what he delivers and knows how to unite a team towards the same goal. His communication is clear and undestood by his audience.
I worked with Malcolm in the early parts of his career and found him to be full of initiative with a huge appetite to learn new stuff.
Read full recommendation
Nothing has surprised about the way his career has blossomed given his zeal to dig into challenges presented to him with his all.
I have had the privilege of getting to know Malcolm Kafesu, the Head of Cybersecurity at The Best Connection, and can confidently say he is an exceptional professional in his field. Malcolm's extensive expertise is evident in the strategic insights and innovative solutions he brings to the table.
Read full recommendation
What truly sets Malcolm apart is his ability to combine deep technical knowledge with a pragmatic, business-oriented approach. He has an innate talent for collaborating across teams, fostering a culture of security awareness, and implementing strategies that align with organizational goals.
I wholeheartedly recommend Malcolm to anyone seeking a dedicated, forward-thinking cybersecurity leader. His expertise, professionalism, and commitment to excellence make him a valuable asset to any team or organization
I had the pleasure of teaching Malcolm during his studies in cybersecurity at the University of Wolverhampton. Malcolm has a passion for the field and was an outstanding student with a strong commitment to mastering the complex world of cybersecurity.
I have worked with Malcolm on some projects and his energy and enthusiasm in the technology field always comes through. I look forward to working together at some point in the future.
Malcolm was an excellent student during his time at the University of Wolverhampton. He was very focused on his studies, showing determination and leadership while pursuing them. He learned new ideas and skills very quickly, demonstrating his great adaptability. I recommend him wholeheartedly and look forward to seeing his future achievements.
05 / LET’S CONNECT
Good conversations
lead to better decisions.
For mentorship, speaking invitations, professional collaboration or a conversation about technology and growth.