BCom (Acc & IT) (Hons), MBA (Lead.& Mgmt), CISSP, CISA, CCSP, CIA, CCSK, ITIL, ISO/IEC 27001 Lead Auditor, ISO 31 000 Lead Risk Manager, Microsoft Certified: Azure AI, NVIDIA AI
Elastos Chimwanda is a cybersecurity, cloud security and AI security strategist specialising in helping organisations achieve and maintain compliance with ISO/IEC 27001, SOC 2, NIST CSF, CMMC, PCI DSS, and HIPAA. He designs unified, audit-ready security architectures that reduce duplication, align with real-world risk, and enable efficient, scalable compliance. He also supports AI governance and regulatory readiness, including alignment with NIST AI RMF, ISO/IEC 42001, and the EU AI Act, helping organisations navigate emerging regulatory requirements with confidence.
As a Virtual CISO (vCISO), Elastos delivers risk-based security assessments, gap analyses, and practical control implementation across AWS, Azure, and GCP environments. His approach is grounded in enterprise architecture principles aligned with TOGAF, ensuring that security controls are structured, scalable, and aligned with business objectives. He has supported public institutions, private enterprises, NGOs, and technology-driven organisations in building secure, resilient, and compliant digital operations, while reducing complexity and improving operational efficiency.