Cyber Security Specialist – Nairobi

About the role

The Cyber Security Specialist will support the development, implementation and monitoring of Britam’s cyber security framework. The role protects business systems, customer data and financial information from cyber threats while ensuring regulatory compliance and promoting security awareness across the organisation.

Key responsibilities

• Assist in creating and maintaining cybersecurity policies, standards, procedures and controls aligned with the company’s risk appetite and regulatory requirements.
• Lead monitoring of networks, applications, endpoints, cloud environments and security tools to detect, analyse and respond to threats and vulnerabilities.
• Coordinate incident response activities, including investigation, containment, eradication, recovery and post‑incident reporting.
• Conduct regular risk assessments, vulnerability scans, penetration testing and security audits, and track remediation.
• Implement data protection controls for customer, employee and financial information in line with privacy regulations.
• Manage identity and access controls, privileged access, access reviews and segregation of duties.
• Work with IT teams to ensure secure configuration of servers, networks, endpoints, backup systems and cloud services.
• Drive security awareness programmes such as phishing simulations and training for staff.
• Perform third‑party security due diligence and support audit activities.

Required profile

• Bachelor’s degree in Cyber Security, IT, Computer Science or a related field.
• Professional certifications such as CISSP, CEH or equivalent.
• Minimum 2–3 years of practical experience in cyber security, information security or IT risk management.
• Strong knowledge of network security, cloud security, data protection and IT risk management.
• Familiarity with international security frameworks such as ISO 27001.

Required skills

• Network security
• Cloud security
• Vulnerability assessment and penetration testing
• Security monitoring tools
• Identity and access management
• ISO 27001 framework
• CISSP certification
• CEH certification