Information Systems Security Manager

About the role

Brites Management Services is hiring a full-time Information Systems Security Manager in Mlolongo. The role establishes, implements and continuously improves the organisation's Information Security Management Framework, safeguarding information assets, business systems, cloud services, enterprise applications, network controls and digital services through strategic leadership in cybersecurity, firewall governance, endpoint security, identity and access management, ICT risk management, security compliance, incident response and business continuity.

Key responsibilities

• Information security governance: develop and maintain the security strategy, policies, standards, procedures and documentation, and review security maturity
• Cybersecurity: lead the enterprise programme, coordinate vulnerability assessments and penetration testing, monitor threats, run incident response and prepare monthly reports
• Firewall and network security: administer firewalls and security appliances, approve firewall rules, manage VPNs, IDS/IPS policies and network segmentation
• Endpoint security: manage EDR, ensure encryption and antivirus compliance, set hardening standards and track compliance dashboards
• Identity and access management: manage role-based access, approve privileged access, run quarterly access reviews and enforce password and multi-factor authentication policies
• Risk, audit and compliance: maintain the ICT risk register, run risk assessments, coordinate audits and support regulatory reviews
• Business continuity: support disaster recovery planning, test DR security and review backups and ransomware readiness
• Security awareness: run annual awareness programmes, user training, phishing simulations and campaigns
• Vendor security: assess third-party controls and cloud/hosted service security
• Management: prepare budgets and work plans, advise management, supervise security staff and take part in ICT management meetings

Required profile

• Degree in Computer Science, Information Technology, Information Systems or a related field
• At least 5 years of relevant ICT experience and 2 years in information security, infrastructure or ICT governance
• Strong understanding of information security governance and cybersecurity
• Strong analytical and problem-solving skills

Required skills

• Firewalls, VPNs, IDS/IPS, endpoint security and identity management
• ICT risk management and compliance

The advertised salary is KShs 70,000-100,000. Applications are made by sending a CV to the company's recruitment team; interviews are held on a rolling basis until the position is filled.