Kevin Cooke
Kevin Cooke is Head of Information Security at Payfast by Network in South Africa, where he leads initiatives to strengthen cybersecurity, information security governance, risk management and regulatory compliance. With more than 20 years of experience in information security, Kevin has built a career helping organisations manage cyber risk, protect sensitive customer and business data, enhance operational resilience and meet complex regulatory and industry requirements.
Before joining Payfast, Kevin held senior information security and risk management roles across various industries, including healthcare, outsourcing, telecommunications and financial services. His expertise spans information security strategy, cybersecurity governance, enterprise risk management, security architecture and the implementation of globally recognised standards and frameworks, including PCI DSS, ISO 27001 and GDPR.
As cybersecurity continues to evolve, Kevin is focused on advancing cyber resilience and integrating emerging technologies into enterprise security strategies. A key area of interest is AI governance and cybersecurity, including the secure and responsible adoption of artificial intelligence, AI-related risk management, data protection, regulatory alignment and the governance of AI-enabled technologies. He advocates for a risk-based approach that enables organisations to realise the benefits of AI innovation while maintaining appropriate security controls, accountability, transparency and oversight.
Passionate about building secure, resilient and trusted digital environments, Kevin works collaboratively across business and technology teams to address emerging threats, strengthen security awareness and embed security into business strategy and decision-making. He is committed to aligning information security with business objectives, enabling innovation and supporting secure, reliable payment experiences.
Kevin regularly shares insights on cybersecurity, information security governance, AI risk management, regulatory compliance and cyber resilience, helping organisations translate complex security challenges into practical strategies that protect their businesses, customers and digital ecosystems.