I help career changers, recent graduates, and cybersecurity learners build practical GRC and AI governance work they can show, explain, and defend during interviews, and, as their experience grows, use in advisory work.
Through Kudzai Consulting Group, I also help small and mid-sized organizations build and maintain the policies, risk processes, and evidence needed for customer requirements, contracts, audits, and assessments. That now includes helping organizations govern their use of AI.
My work through Kudzai Consulting Group supports both individuals entering GRC and organizations building stronger security programs.
The GRC career programs help learners move beyond theory by building practical, ISO/IEC 27001-aligned work they can add to a portfolio and explain during interviews.
The AI governance programs begin with a free step. Work through the TechFlow case to assess an AI tool, assess its impacts, or build an AI management system, with work you can explain and defend.
The GRC advisory services help small and mid-sized organizations identify gaps, build policies and risk processes, organize evidence, and maintain readiness for customers, contracts, audits, and assessments.
I began my career in technology as a software engineer before moving into higher education, where I found my calling as a teacher, mentor, researcher, and academic leader.
Over more than two decades, I have taught computer science and cybersecurity, led computing and cyber programs, supported workforce-development initiatives, mentored students and professionals, and helped expand access to technology pathways.
My experience includes service as a Cyber Science Professor at the United States Naval Academy, leadership of an NSA/DHS Center of Academic Excellence in Cyber Defense, academic program development, research, and grant-funded student-success work.
I created Kudzai Consulting Group to bring that same practical, structured approach to GRC career preparation and organizational readiness. People need more than information, and organizations need more than generic documents. Both need a clear path, usable work, and evidence they can explain.
Why I teach this way. About three years ago, a former colleague introduced me to a career changer with graduate qualifications and a professional certification. I referred her for an interview. Afterward, the hiring manager called: her qualifications showed she had studied the subject, but he could not see evidence that she could apply it, or explain what she had produced and why. That call shaped everything I have built since. Learners examine realistic cases, create the documents professionals produce, and defend the reasoning behind their decisions. Learn it. Build and defend it. Use it in your career.
Dr. Shumba’s verified credentials include PECB Certified ISO/IEC 42001 Lead Implementer, PECB Certified ISO/IEC 27001 Senior Lead Implementer, ISO/IEC 27001:2022 Foundation, and ABET Program Evaluator. ISO/IEC 42001 is the international standard for AI management systems, the framework an organization uses to govern its use of AI responsibly; ISO/IEC 27001 is the international standard for information security management systems. Together they cover both halves of what I teach and advise on. Select any badge to view its issuing organization’s verification record on Credly.
My career has included teaching, academic leadership, cybersecurity program development, research, grant-funded student success initiatives, mentoring, award recognition, and national media coverage for work connected to technology pathways.
More than two decades of experience teaching, mentoring, and guiding learners in computing including cybersecurity and software engineering.
Industry experience in software engineering before transitioning into higher education and technology mentoring.
Served in academic leadership roles including department head, associate dean, and program director.
Served as a Graduate Cyber Programs Program Director and Cyber Science Professor at a military institution.
Served as Director of an NSA/DHS Center of Academic Excellence in Cyber Defense.
Recipient of the University System of Maryland Elkins Professorship, recognizing leadership and excellence in higher education.
Recognized by the University System of Maryland for mentoring and supporting student success.
Research centers on machine learning solutions for cyber investigations, cybersecurity education, and AI and ethics.
Received millions of dollars in grant funding to support student success, research, technology pathways, and educational opportunity.
Featured for work connected to building a technology pipeline and expanding opportunity in tech education.
Committed to helping students, families, women, minorities, immigrants, and career changers navigate technology opportunities.
Created project-based GRC programs that help learners build ISO/IEC 27001-aligned and AI governance work they can show, explain, and defend.
Provides readiness and advisory support for organizations working toward ISO/IEC 27001, CMMC, and NIST SP 800-171 requirements.
Created the six-stage Applied AI Governance Pathway and the TechFlow case, so learners can practice AI governance work before anyone gives them the job title.
People and organizations do better when they have direction, structure, usable evidence, and a clear next step. My work is about helping learners show what they can do and helping organizations build programs they can maintain and explain.
Explore the GRC and AI governance career programs for individuals, view readiness and advisory services for organizations, or contact Kudzai Consulting Group about speaking and collaboration opportunities.
