Company · Careers
Build Capability That Stays.
Join a team that advises, engineers and operates security for institutions that cannot afford to fail.
Executive Summary
- 01Security careers reward people who convert frameworks like NIST CSF 2.0 into owned, verifiable work.
- 02Analysts earn trust through traceable evidence: findings, POA&M entries and documentation that stands up to review.
- 03Regulatory fluency across Ghana, the EU and health-data regimes is a practical skill, not a specialty.
Why Join DAAKYI
Do the Work, Then Teach It Forward.
The people who defend critical systems should also be the ones who teach the next generation to do it.
Work Across the Full Lifecycle
Guide, Secure and Operate under one roof: assessments, engineering and 24/7 operations, rather than one narrow slice.
Capability, Not Dependency
Knowledge transfer is built into every program, so teaching and mentoring are part of the job.
One Standard
International standards applied in local regulatory context.
Grow Through the Cyber Academy
Awareness, skills, certification and readiness paths delivered with PECB and Proofpoint.
- Expertise
- Integrity
- Quality
- Collaboration
- Empowerment
- Innovation
Open Roles
2 Open Roles
Cybersecurity Program Manager
Lead the planning, coordination and supervision of cybersecurity programs and projects, working with cross-functional teams to deliver security initiatives.
Houston, TX (Remote)
View RoleCybersecurity Analyst
Provide information security expertise to system teams, track and remediate weaknesses, and keep security plans and authorization documentation current.
Houston, TX (Remote)
View Role
Don't See Your Role? Tell Us What You Would Build with Us.
Careers InquiryPerspective
The Context Behind Our Approach
What Program Management Really Demands
A security program manager turns a framework into funded, sequenced work. NIST CSF 2.0 helps because it adds Govern to Identify, Protect, Detect, Respond and Recover, which puts accountability, risk appetite and oversight on the same map as technical controls. The manager sets scope, assigns owners, tracks dependencies and reports progress in terms executives can act on. Good managers know when a gap is a policy problem, a tooling problem or a staffing problem. Stakeholders need decisions, not activity logs.
How Analysts Work with Evidence
An analyst in an authorization environment lives in the evidence. Each weakness becomes a POA&M entry with an owner, a remediation action and a due date. Control selection draws on NIST SP 800-53, while NIST SP 800-37 frames the risk management lifecycle that leads to an authorization decision. Continuous monitoring keeps that decision honest after approval. Review of system documentation is routine, so clear writing counts as much as technical depth. A finding that cannot be reproduced, scoped and closed with proof is only an opinion.
Showing Judgment Before You Are Hired
Candidates stand out when they can show how they think. Map a sample control set from ISO/IEC 27001:2022 Annex A, which has 93 controls, to the guidance in ISO/IEC 27002. Trace a hypothetical intrusion through MITRE ATT&CK, which organizes adversary behavior into 14 enterprise tactics, and note where detection would occur. Write a short remediation plan with owners and verification steps. Keep each artifact short enough for a reviewer to read in minutes. These samples reveal judgment more clearly than a list of certifications does.
Reading Regulation Across Jurisdictions
Security work crosses borders, so regulatory literacy matters. In Ghana, the Cybersecurity Act, 2020 (Act 1038) covers Critical Information Infrastructure, accreditation of providers and professionals, and incident reporting. The Data Protection Act, 2012 (Act 843) sets eight privacy principles for data controllers. Privacy law sets firm timelines for telling regulators about breaches. HIPAA requires administrative, physical and technical safeguards for electronic protected health information. Banking adds sector rules, such as the Bank of Ghana Cyber and Information Security Directive. Practitioners read each text for obligations, not slogans.
Certifications open the door. Clear evidence, sound judgment and precise documentation keep a security professional trusted.
Glossary
Key Terms
- POA&M
- A tracked plan that lists each security weakness with its owner, remediation steps and milestones.
- Continuous Monitoring
- Ongoing assessment of controls and risk so that authorization decisions stay current rather than aging on paper.
- Critical Information Infrastructure
- Systems designated for special protection under Ghana's Cybersecurity Act, 2020 (Act 1038) because their compromise would carry serious consequences.