Assistant Manager, Information Security

• Job Type Full Time
• Qualification BA/BSc/HND , Professional Certificate
• Experience 4 years
• Location Nairobi
• Job Field ICT / Computer
• Collect and validate data for the monthly security posture measurement cycle and prepare draft security dashboards for the Senior Manager’s review.
• Maintain the security gap register, recording each gap’s owner, severity, target date, and status.
• Follow up on open security gaps with control owners and report overdue items to the Senior Manager.
• Check remediation evidence submitted by control owners against the agreed standard and recommend closure or retention to the Senior Manager.
• Carry out Information Security risk assessments on new systems, changes and projects as assigned and prepare draft risk opinions.
• Monitor the managed SOC provider’s reports against agreed service levels and track SOC findings to close.
• Review access recertification results, privileged access reports and joiner, mover and leaver exceptions produced by I.T and log findings.
• Review the security configuration of new and changed systems against Group standards and approved baselines, as assigned.
• Complete security assessments of third-party vendors using the approved questionnaire and evidence requirements.
• Track findings from independent security testing and confirm retesting before recommending closure.
• Maintain the risk acceptance log, recording rationale, approver and expiry date, and flag acceptances near expiry.
• Gather evidence and draft responses for internal audit, external audit and regulatory requests.
• Run security awareness activities, including phishing simulations, and report on participation and results.
• Support the Senior Manager in overseeing security incident response and post-incident reviews, and track lessons learned to completion.
• Keep current with emerging threats and regulatory changes and brief the Senior Manager on their impact.
• Ensure all assigned tasks and projects are executed within the approved policies, procedures and SLAs of the department.
• Stand in for the Senior Manager Information Security on day-to-day matters in their absence.
• Design and maintain regular security processes to measure and improve the security posture of the Bank.
• Ability to understand the related regulations and the security standards.
• Ability to assess and measure the security posture of the organization and/or third-party vendors.
• Ability to coordinate and plan for the remediation and mitigation of the identified security gaps.
• Bachelor’s degree in Information Technology, Computer Science, Information Security or a related field from a recognized University.
• Certification in Information Security.
• Information Security architecture.
• IT technology platforms across the IT domains.
• Information security management and standards or benchmarks.
• Effective application of all relevant banking policies, processes, procedures and guidelines.
• Minimum 4 years of experience in Cybersecurity and/or Information Security Governance.
• Think & Act Customer – Applying
• Business & Strategic Acumen – Applying
• Ownership & Accountability – Applying
• Change & Innovation Agility – Applying
• Plan & Execute Excel – Applying
• Digital Mindset – Applying
• Foster Synergy – Applying
• Interpersonal Effectiveness – Applying