Department of Finance, Governance, and Information Security

Andrew Okello

Co-Director and Head of Finance

Information Systems Auditor, Cybersecurity Specialist, Penetration Tester, and Data Scientist leading institutional financial governance, AI safety and privacy auditing, and enterprise risk management.

Executive biography

Strengthening institutional governance, AI safety, and data privacy

Andrew Okello, Co-Director and Head of Finance

Andrew Okello is an Information Systems Auditor, Cybersecurity Specialist, Penetration Tester, and Data Scientist with extensive experience in information technology governance, enterprise risk management, and cloud security. At the AI for Uganda Initiative, he serves as Co-Director and Head of Finance, overseeing institutional strategy, financial stewardship, grant administration, and data privacy governance.

In his regulatory and governance work, he conducts data protection audits, leads investigations into data privacy violations, and guides organizations on complying with global data protection standards and Uganda's Data Protection and Privacy Act 2019. His background integrates rigorous auditing methodologies and offensive security testing with practical data science, enabling organizations to deploy artificial intelligence and information systems that are secure, compliant, and resilient against cyber threats.

Governance and security

Contributions and core areas of expertise

Executive stewardship, regulatory compliance, and security auditing across AI for Uganda programs.

Financial governance

Institutional financial stewardship and audit assurance

Directs financial planning, direct-cost research grant accounting, procurement controls, internal control assurance, and external audit readiness for AI for Uganda research programs and community initiatives.

AI safety and risk

AI safety, risk, and security red-teaming

Leads domain safety red-teaming and security verification for financial inclusion, healthcare, and public administration systems against international information security and national data protection controls.

Privacy governance

Dataset privacy and decontamination governance

Oversees personal data protection and statutory compliance under Uganda's Data Protection and Privacy Act 2019 across open datasets, ensuring training and evaluation corpora prevent personal data leakage and protect citizen privacy.

Cybersecurity

Penetration testing, enterprise risk, and security mentorship

Combines offensive security testing, enterprise risk management, and information systems auditing with mentorship of early-career engineers, auditors, and data scientists across Uganda.

Leadership directory

Explore our leadership team