Technology

Doctor of Philosophy in IT Security and Audit

The Doctor of Philosophy in IT Security and Audit is a postgraduate research programme offered at Jaramogi Oginga Odinga University of Science and Technology (JOOUST) through the School of Business and Economics. The programme trains scholars to conduct advanced research on information security, cybersecurity, IT audit, and digital forensics, contributing to cyber resilience and secure digital infrastructure in Kenya and globally.

Students engage with advanced information security theory, cryptography, network security, digital forensics, IT audit frameworks, and research methodology. The programme combines coursework with thesis research, requiring candidates to develop a research proposal, conduct independent computational and field research, and produce a doctoral dissertation that makes an original contribution to IT security and audit.

Kenya is rapidly digitising with growing adoption of mobile money, e-government, and digital services, creating significant cybersecurity challenges including data breaches, fraud, and cyber attacks. The programme addresses national priorities under Vision 2030 and the National Cybersecurity Strategy by training researchers who can develop security solutions, audit frameworks, and forensics capabilities for Kenya's digital economy.

Teaching methods include lectures, security laboratory sessions, penetration testing, audit case studies, and supervised thesis work. Students have access to JOOUST's computing facilities and collaborate with the Communications Authority of Kenya, the Kenya Computer Incident Response Team, and private sector cybersecurity firms.

Graduates pursue careers as university lecturers, cybersecurity researchers, IT auditors, security consultants, and digital forensics specialists in universities, the Communications Authority, banks, audit firms, and cybersecurity companies.

This programme is ideal for holders of a Master's degree in IT security, computer science, information systems, or related fields who are committed to advancing knowledge in IT security and audit.

Duration: 3-5 years
Public, up to: Ksh 244,800
Private, up to: Ksh 313,700
Job market: High

The programme

What you study, how long it takes, and how it is delivered.

Practicalities

Study mode: Full-time, Part-time
Attachment: 0 months
Average class: 5 students
Award: PhD

What you study

10 subjects

Information Security Theory
Cryptography and Cryptanalysis
Network Security
Digital Forensics
IT Audit Frameworks
Research Methodology
Cybersecurity Risk Management
Thesis Research
Secure Software Engineering
Cloud Security

Modules

12 in the programme

Advanced Information Security Theory
Year 1Semester 13 creditsCore
Advanced security theory including security models, access control, trust management, and security architecture principles
Advanced Cryptography and Cryptanalysis
Year 1Semester 13 creditsCore
Cryptography, covering theoretical foundations, practical methodologies, and current analytical techniques used in advanced research and professional practice.
Cryptography and Cryptanalysis
Year 1Semester 23 creditsCore
Advanced cryptography including symmetric and asymmetric encryption, hash functions, digital signatures, and cryptographic protocol analysis
Network Security and Intrusion Detection
Year 1Semester 23 creditsCore
Network security, covering theoretical foundations, practical methodologies, and contemporary research developments relevant to doctoral study in this area.
Network and Systems Security
Year 1Semester 33 creditsCore
Advanced network security including firewalls, IDS/IPS, VPN, network forensics, and secure network architecture
Digital Forensics and Incident Response
Year 2Semester 13 creditsCore
Digital forensics including evidence acquisition, analysis, chain of custody, and incident response methodologies
Security Governance and Risk Management
Year 2Semester 13 creditsCore
Security governance, covering strategic planning, organisational behaviour, and contemporary management challenges relevant to professional practice.
IT Audit and Compliance Frameworks
Year 2Semester 23 creditsCore
IT audit frameworks including COBIT, ISO 27001, NIST, and Kenyan regulatory requirements for IT audit and compliance
Threat Intelligence and Analysis
Year 2Semester 23 creditsCore
Threat intelligence, covering theoretical foundations, practical methodologies, and current analytical techniques used in advanced research and professional practice.
Cybersecurity Risk Management
Year 2Semester 33 creditsCore
Risk assessment and management including threat modelling, vulnerability assessment, risk treatment, and security metrics
Research Methods in IT Security
Year 2Semester 33 creditsCore
Research design and methodology, covering quantitative and qualitative approaches, data collection techniques, and analytical frameworks relevant to doctoral-level research in the field.
Departmental Seminars
Year 3Semester 13 creditsCore
Research presentations and peer review of doctoral work, providing a platform for doctoral candidates to present research findings, engage with peer feedback, and explore contemporary debates in.

Specialisations

Cybersecurity Analysis
Specialization in Cybersecurity Analysis, preparing graduates for careers such as cyber-security-analyst.
IT Audit Practice
Specialization in IT Audit Practice, preparing graduates for careers such as it-auditor.
Junior Cybersecurity Analysis
Specialization in Junior Cybersecurity Analysis, preparing graduates for careers such as junior-cybersecurity-analyst.
Cybersecurity Research
Specialization in Cybersecurity Research, preparing graduates for careers such as cybersecurity-analyst.
Academic Research in Technology
Specialization in Academic Research in Technology, preparing graduates for careers such as university-lecturer.
Penetration Testing
Specialization in Penetration Testing, preparing graduates for careers such as penetration-tester.
Cryptography
Research on cryptography
Threat Intelligence
Research on threat intelligence
Digital Forensics
Research on digital forensics
Cloud Security
Research on cloud security

A day as a student

A typical day combines security laboratory work including penetration testing and forensic analysis with research on security threats and vulnerabilities, data analysis, literature review, and thesis writing. Students attend computing and security research seminars, present findings at departmental colloquia, and engage with KE-CIRT and cybersecurity firms for industry research.

The trade offs

In its favour

Access to KE-CIRT, CA and ODPC for research
Research contributes to national cyber defence
Strong institutional links with CA, KE-CIRT, and ISACA
Diverse career paths in academia, government, banking, and private sector

Against it

Requires strong technical computing skills and continuous learning
Handling sensitive security data requires ethical compliance
Security research involves handling sensitive data and ethical considerations
Rapidly evolving threat landscape requires continuous skills updating

What it costs

Tuition at both ends of the market, and how to pay for it.

What it costs, and where

Against 191 technology courses

Public150k to 245k

150k at Jaramogi Oginga Odinga University of Science and Technology245k at Kenyatta University

Private200k to 314k

200k at Mount Kenya University314k at Kabarak University

Annual tuition in Kenyan shillings, rounded. The upright tick is the median for this field, so a bar sitting entirely to its right is an expensive programme by the standards of its own subject.

The fine print

JOOUST 150K(eafinder). KU 244.8K(ku.ac.ke). MKU 200K. Kabarak 313.7K(kabarak.ac.ke)

Students may access HELB postgraduate loans, DAAD scholarships, NRF research grants, and ISACA research grants for IT security and audit research.

Funding options

HELB Postgraduate Loan
LoanKsh 80,000
DAAD Scholarship
Scholarship
NRF Research Grant
Grant
ISACA Research Grant
Grant

Scholarships

5 recorded

DAAD Scholarship
ScholarshipKenyan
African graduates meeting academic criteria for doctoral study
NRF Research Grant
GrantKenyan
Researchers at Kenyan institutions conducting research relevant to national development
Google Africa PhD Fellowship
Fellowship
African computing researchers
NACOSTI Research Grant
GrantKenyan
Science and technology researchers in Kenya
HELB Postgraduate Scholarship
LoanKsh 200,000Kenyan
Kenyan postgraduate students

Getting in

The grades, the alternatives, and who accredits the award.

What you need

KCSE mean grade: C+
Alternative entry: Relevant diploma or equivalent qualification

Master's Degree
MSc in IT Security, Computer Science, Information Systems, or related field from a recognised university
Undergraduate qualification
Bachelor's degree in Computer Science, IT, or related computing field
Research capability
Evidence of research ability through publications, reports, or academic work

How you are assessed

5 components

Thesis Proposal Defence
Oral defence20% of the mark
Defence of research proposal before faculty panel
Coursework
Continuous assessment30% of the mark
Assignments, security projects and seminar presentations
Laboratory and Audit Projects
Coursework20% of the mark
Continuous Assessment Tests (CATs)
Coursework30% of the mark
Oral Viva Voce
Coursework100% of the mark

Accreditation

Accredited by the Commission for University Education (CUE).

Accredited by

Commission for University Education (CUE)
Academic accreditationRequired
Mandatory accreditation for all university programmes in Kenya
Commission for University Education
AcademicRequired
Statutory body responsible for accreditation of university programmes in Kenya

Where it leads

The roles it opens, and what you leave with.

Where graduates go

8 roles

IT Auditor
High demandKsh 90,000 to Ksh 200,000
Conducts IT audits at audit firms, banks, or government agencies
Penetration Tester (Ethical Hacker)
High demandKsh 100,000 to Ksh 250,000
Conducts security testing and vulnerability assessment for organisations
University Lecturer (IT Security)
High demandKsh 90,000 to Ksh 200,000
Teaches IT security and conducts research in university computing departments
Cybersecurity Analyst
High demandKsh 90,000 to Ksh 200,000
Conducts cybersecurity analysis and research at KE-CIRT, government, or cybersecurity firms
Digital Forensics Specialist
High demandKsh 200,000 to Ksh 500,000
Forensics at KE-CIRT and agencies
Security Consultant
High demandKsh 220,000 to Ksh 550,000
Consulting on security projects
University Professor
High demandKsh 180,000 to Ksh 450,000
Teaching and research in computing departments
Cybersecurity Researcher
High demandKsh 220,000 to Ksh 550,000
Research on cybersecurity

Graduate outcomes

Graduates work as university lecturers, cybersecurity researchers, IT auditors, and security consultants in universities, the Communications Authority, banks, audit firms, and cybersecurity companies.

Where these fields lead

8 careers

Certifications

Industry links

Common misconceptions

IT security and audit is just about installing antivirus software
IT security and audit encompasses cryptography, network security, digital forensics, risk management, compliance auditing, and secure software engineering, requiring advanced technical and analytical training.
A PhD in IT security has limited career prospects
Growing cyber threats and Kenya's digital transformation create high demand for cybersecurity researchers and IT auditors at universities, government, banks, and cybersecurity firms.
IT security research is not relevant to Kenya
Kenya's rapid digitalisation including mobile money, e-government, and digital services creates significant cybersecurity challenges, making IT security research critical for national security and economic stability.
IT security is only for computer scientists
IT security and audit combines technical security, risk management, governance, and compliance, making it relevant to professionals from computing, business, and law backgrounds.