Assistant Manager, Information Security

About the role

DIB Bank Kenya is hiring a full-time Assistant Manager, Information Security in Nairobi. The role protects the bank's financial assets, customer data and IT infrastructure against cyber threats while ensuring compliance with regulatory standards. It sits under the Senior Manager Information Security and covers security governance, risk assessment, vendor assessments and audit support.

Key responsibilities

• Collect and validate data for the monthly security posture measurement cycle and prepare draft security dashboards for the Senior Manager's review.
• Maintain the security gap register (owner, severity, target date, status), follow up on open gaps and check remediation evidence against the agreed standard.
• Carry out information security risk assessments on new systems, changes and projects and prepare draft risk opinions.
• Monitor the managed SOC provider's reports against service levels and track findings to closure.
• Review access recertification results, privileged access reports and joiner, mover and leaver exceptions.
• Review security configurations of new and changed systems against group standards and approved baselines.
• Complete security assessments of third-party vendors using the approved questionnaire and evidence requirements.
• Track findings from independent security testing and confirm retesting before recommending closure.
• Maintain the risk acceptance log with rationale, approver and expiry date, and flag acceptances near expiry.
• Gather evidence and draft responses for internal, external and regulatory audit requests.
• Run security awareness activities such as phishing simulations and report on participation and results.
• Support the Senior Manager in incident response and post-incident reviews, and keep the Senior Manager brief on emerging threats and regulatory changes.
• Ensure work complies with approved policies, procedures and SLAs, and stand in for the Senior Manager in their absence.

Required profile

• Bachelor's degree in Information Technology, Computer Science, Information Security or a related field from a recognised university.
• Certification in Information Security.
• Minimum 4 years of experience in Cybersecurity and/or Information Security Governance.
• Ability to understand regulations and security standards, assess and measure security posture, and coordinate remediation of security gaps.

Required skills

• Information security architecture.
• IT technology platforms across IT domains.
• Information security management and standards or benchmarks.
• Effective application of banking policies, processes, procedures and guidelines.