Assistant Manager Information Security

About the role

DIB Bank Kenya Limited, a fully owned subsidiary of Dubai Islamic Bank PJSC, is recruiting an Assistant Manager, Information Security. The role protects the bank's financial assets, customer data and IT infrastructure against cyber threats while ensuring compliance with regulatory standards. It sits under the Senior Manager Information Security and covers security governance, risk assessment, vendor and SOC oversight, and security awareness.

Key responsibilities

• Collect and validate data for the monthly security posture measurement cycle and prepare draft security dashboards for the Senior Manager's review.
• Maintain the security gap register (owner, severity, target date, status), follow up on open gaps and report overdue items.
• Check remediation evidence against the agreed standard and recommend closure or retention.
• Carry out information security risk assessments on new systems, changes and projects and prepare draft risk opinions.
• Monitor the managed SOC provider's reports against service levels and track findings to closure.
• Review access recertification results, privileged access reports and joiner, mover and leaver exceptions, and review security configurations against Group standards and approved baselines.
• Complete security assessments of third-party vendors and track findings from independent security testing.
• Maintain the risk acceptance log and gather evidence and draft responses for internal, external and regulatory audits.
• Run security awareness activities such as phishing simulations and support incident response and post-incident reviews.
• Keep current on emerging threats and regulatory changes and stand in for the Senior Manager in their absence.

Required profile

• Bachelor's degree in Information Technology, Computer Science, Information Security or a related field from a recognised university.
• Certification in Information Security.
• Minimum 4 years of experience in cybersecurity and/or information security governance.
• Ability to understand regulations and security standards, assess the security posture of the organisation and vendors, and plan remediation of security gaps.

Required skills

• Information security architecture.
• Knowledge of IT technology platforms across IT domains.
• Information security management and standards or benchmarks.
• Effective application of banking policies, processes, procedures and guidelines.