Dorcas Babundo

Dorcas Babundo currently serves as an IT Governance, Risk, and Compliance (GRC) Analyst at MitigateIT, where she plays a pivotal role in strengthening the organization’s cybersecurity posture and ensuring regulatory adherence. In her capacity, Dorcas is instrumental in developing, implementing, and maintaining comprehensive GRC frameworks that align with industry standards such as ISO 27001, NIST, and GDPR. Her expertise in risk management enables her to conduct thorough risk assessments, identifying vulnerabilities within IT systems and operational processes, and recommending strategic controls to mitigate potential threats.

At MitigateIT, Dorcas is actively involved in supporting both internal and external audit processes—gathering evidence, documenting controls, and tracking remediation efforts to ensure compliance and continuous improvement. Her keen attention to detail and analytical mindset facilitate the identification of compliance gaps and the development of actionable plans to address them. Additionally, she contributes to the organization’s Information Security Management System (ISMS) implementation and auditing, ensuring that security controls are effectively integrated and maintained across all departments.

Beyond her technical expertise, Dorcas demonstrates strong leadership and collaboration skills, working closely with cross-functional teams to foster a culture of security awareness and compliance. Her passion for cybersecurity and risk management, combined with her operational background, positions her as a valuable asset in safeguarding organizational assets and supporting strategic business objectives. Through her efforts, MitigateIT continues to enhance its governance frameworks, reduce operational risks, and uphold the highest standards of cybersecurity compliance.