Assistant Manager Information Security Systems

About the role

The Assistant Manager, Information Security Systems leads the bank's enterprise cybersecurity and information security operations in Nairobi. The role provides leadership and coordination to the IT Security function, monitors computer networks and ICT infrastructure against cyber-attacks and security threats, and safeguards the bank's data and knowledge base. It is a full-time management position.

Key responsibilities

• Review security reports from incidents, ensure investigations and remedial actions are in place, and enforce the bank's ICT security policy
• Ensure compliance with local regulations such as encryption and privacy laws, and with change management and operation level agreements
• Oversee the Information Security Policy, security controls, risk analysis and risk management, and the ICT security awareness programme
• Coordinate disaster recovery plans and oversee identity and access management solutions, including access control, patch management, web application firewalls and database security
• Design and implement security architecture, harden systems, and advise on security during projects and deployments
• Enforce security policies, liaise with stakeholders, and review security controls and configurations

Required profile

• At least 12 years of relevant experience, including 3 in a supervisory role
• Bachelor's and Master's degrees in IT, Computer Science, Software Engineering, Business IT, ICT Project Management or Computer Engineering, or equivalent
• Certification such as CCNA, CISA, CISM, CISSP or equivalent, and a 4-week management course
• Knowledge of ICT trends in banking and financial services, and of security standards and compliance regulations

Required skills

• In-depth knowledge of servers, client and mobile operating systems and RDBMS
• Vulnerability management, penetration testing and incident response
• Programming/scripting languages such as .NET, Java, Perl and C#
• Internet protocols such as DNS, TCP/IP, SMTP, HTTP and SSL

Applications are submitted through the recruitment agency handling the posting.