Lutemuka Zuendoki

About Lutemuka Zuendoki

Technology Risk and Cybersecurity governance leader with more than 20 years of experience spanning global internal audit, enterprise technology risk management, and infrastructure operations. My career combines deep technical expertise with risk and governance leadership, enabling organizations to strengthen cybersecurity posture, improve regulatory compliance, and manage technology risk across complex global environments. I currently lead and execute risk-based IT and cybersecurity audits across multinational operations, covering areas such as cloud security, identity and access management, cybersecurity governance, and emerging technology risk. My work supports enterprise risk management efforts across commercial entities operating throughout North America, Europe, and Asia-Pacific. Prior to specializing in audit and risk leadership, I held hands-on infrastructure roles managing enterprise server, network, and directory services environments, which provides a practical engineering perspective when evaluating modern technology control frameworks. Throughout my career I have: • Led global cybersecurity and technology risk audits across 12 international jurisdictions • Advised senior technology and business leaders on control design, remediation strategies, and regulatory expectations • Developed and executed risk-based audit programs aligned to evolving cyber and technology threats • Collaborated with global internal audit teams, external auditors, and technology stakeholders to strengthen governance and compliance programs My experience spans IT audit, cybersecurity governance, cloud security oversight, identity and access management, and enterprise GRC programs across highly regulated industries. Certifications: CISSP | CISM | CISA | CRISC | MCSE | MBA I am particularly interested in opportunities where I can contribute to enterprise technology risk leadership, cybersecurity governance, and global GRC programs.

Experience

1. Information Technology Audit Manager

   Sompo

   Jan 2023 — Present · Charlotte, NC, US

   Technology Risk and Cyber Governance lead supporting global internal audit coverage across cybersecurity, cloud computing, AI governance, and enterprise technology risk domains.Lead and execute risk-based IT audits spanning North America, the United Kingdom, Central Europe, and Turkey while providing strategic guidance to audit teams across Asia-Pacific, Mexico, and Brazil.Key contributions include:• Led a global cybersecurity audit evaluating enterprise security governance, identity and access management, cloud security controls, and technology risk management across operations in 11+ jurisdictions including the United States, Canada, Mexico, the UK, Luxembourg, Germany, Italy, Spain, Switzerland, Singapore, and Bermuda.• Leading global audits covering cybersecurity governance, cloud environments, AI governance controls, and J-SOX IT general controls • Serving as the primary internal audit subject matter expert for cybersecurity risk and emerging technology risk areas • Advising business and technology stakeholders on control design, remediation strategies, and regulatory risk considerations • Contributing to development of the Internal Audit AI Strategy and expansion of the GenAI Prompt Library supporting the audit lifecycle • Driving improvements to IT risk assessment practices to incorporate emerging cyber threats, cloud risk, and AI governance considerations • Collaborating with global stakeholders and external auditors to strengthen governance and regulatory compliance programs

Education

• University of Memphis

  Master of Business Administration (M.B.A.), Dual Concentration: Finance & Management Information Systems

  1999

• University of Memphis

  Bachelor of Business Administration (B.B.A.)

  1997