Nawa is a Cybersecurity and Digital Resilience Executive with over 18 years of professional experience across technology, banking, cybersecurity and ICT regulation. His experience covers Cyber Risk Management, Information Security Governance, Cyber Defence and Incident Response, Digital Forensics, Security Architecture, Business Continuity and Operational Resilience, Public Key Infrastructure, Cybersecurity Policy and Regulation, and Information Security Management Systems. His work experience spans Zambia and Australia and includes both financial services and national ICT regulatory environments.
He holds a Master of Science in Cybersecurity, awarded with Distinction, from the University of Central Lancashire in the United Kingdom/Cyprus and a Bachelor of Science in Computer Science from Edith Cowan University in Australia. He is a certified ISO/IEC 27001:2022 Lead Auditor, holds the Certificate of the Business Continuity Institute (CBCI), has undertaken advanced SANS Institute training in digital forensics and incident response, and holds professional membership with the Information and Communications Technology Association of Zambia (ICTAZ). He was named ICTAZ Cybersecurity Individual of the Year 2025.
Prior to joining Zanaco Plc, Nawa served as Director of Digital Infrastructure and Resilience at the Zambia Information and Communications Technology Authority (ZICTA), where he led the National Public Key Infrastructure programme and established the Authority’s Information Security Management System based on ISO/IEC 27001:2022. He was part of the team that established Zambia’s national Cyber Incident Response Team (ZmCIRT) and contributed to national cybersecurity policy, regulatory and legislative initiatives, including the Data Protection Act. His work also included directing digital forensic investigations supporting law enforcement, public institutions and the financial sector.
Earlier in his career, he gained experience in the financial services sector with Finance Bank Zambia and worked in Australia with AustDomains.