Background

Equity Bank Limited (The "Bank”) is incorporated, registered under the Kenyan Companies Act Cap 486 and domiciled in Kenya. The address of the Bank’s registered office is 9th Floor, Equity Centre, P.O. Box 75104 - 00200 Nairobi. The Bank is licensed under the Kenya Banking Act (Chapter 488), and continues to offer retail banking, microfinance and relat...

Role Purpose:

The Senior Manager SOC will be responsible for the management of the Inhouse local SOC and the Offshore Outsourced SOC. (S)he will be responsible for management and supervision of a team of Security Analysts and technical experts working in a 24x7 shift environment and the technical and process direction of the Security Operations Center, providing direction to the analysts as well as acting as a liaison to other teams within the Bank.

The Security Operations Center is responsible for providing 24x7x365 continuous investigation of correlated security event feeds and the appropriate triage and escalation in case of an identified security incident.

The Security Operation Center is the primary contact for any suspected security incident and works together with the Incident Response teams on resolving incidents and remediating threats across the Bank.

Key Responsibilities:

This is a management role responsible for managing the Security Operations Centre (in-house and Outsourced), detecting, responding to and managing security incidents to protect the Group’s Information assets.

Formulate and develop the Security Operations Framework, including SOC processes, policies, and procedures.

Build, develop and manage a Security Operations Centre.

Manage all day-to-day activities within the Security Operations Centre to ensure effective operation of threat detection and prevention.

Provide leadership, guidance, and technical expertise in running a SOC.

Ensure the Bank’s security detection, protection, response, and recovery procedures are up to date, tested, maintained, and followed.

Be accountable for security incident management.

Ensure proper integration and handover of new security services within the monitoring and detection capability of the SOC.

Ensure continuous SOC services improvement.

Set-out key security performance indicators that ensure proper service delivery and service improvements.

Develop and maintain SOC-related policies, procedures, and processes to ensure all necessary information and security data is continuously being collected, correlated, and analyzed to detect potential external and internal threats to the organization.

Develop metrics needed to communicate risk levels to the organization and articulate the value derived from the SOC Services to the Group.

Develop and provide reports regularly to meet management, compliance or audit needs.

Collaborate with relevant internal stakeholders, including security, Risk, Operations, IT, NOC, etc. to ensure appropriate security incident management and threat response processes are in place and maintained.

Provide briefing to the business stakeholders regarding ongoing security incidents and threat Levels.

Qualifications

Role Requirements:

Bachelor’s degree in information technology, Information Security/Assurance, Engineering or similar areas of study.

Hold at least one relevant industry certification (GCIH, GCED, CISSP, CISA, CISM, etc.).

Understanding of SIEM tools such as Splunk, ArcSight, RSA, McAfee ePO, etc.

Experience building and maintaining a high-performance team of analysts.

Expertise with industry standard frameworks (ISO, NIST, PCI).

Experience maintaining metrics and SLAs.

Minimum 5-7 years of Security leadership experience, with experience building long-term career development plans for team members at all levels.

Experience in designing, implementing and measuring relevant security and technology management critical success factors, key performance indicators, and metrics.

Ability to create shift schedules to ensure 24x7 coverage by support personnel.

In-depth knowledge of modern security concepts and how to apply them.

Experience in managing and maintaining relationships with the Bank, vendors, and customers.

Knowledge of a few of the following: Strong Authentication, End Point Security, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring (DAM), Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM)

• Manage the Inhouse local SOC and the Offshore Outsourced SOC.
• Manage and supervise a team of Security Analysts and technical experts.
• Provide technical and process direction to the Security Operations Center.
• Act as a liaison to other teams within the Bank.
• Provide 24x7x365 continuous investigation of correlated security event feeds.
• Perform appropriate triage and escalation in case of an identified security incident.
• Serve as the primary contact for any suspected security incident.
• Work with Incident Response teams on resolving incidents and remediating threats.
• Detect, respond to and manage security incidents.
• Formulate and develop the Security Operations Framework.
• Build, develop and manage a Security Operations Centre.
• Manage all day-to-day activities within the Security Operations Centre.
• Provide leadership, guidance, and technical expertise in running a SOC.
• Ensure security detection, protection, response, and recovery procedures are up to date, tested, maintained, and followed.
• Be accountable for security incident management.
• Ensure proper integration and handover of new security services.
• Ensure continuous SOC services improvement.
• Set-out key security performance indicators.
• Develop and maintain SOC-related policies, procedures, and processes.
• Develop metrics to communicate risk levels and articulate the value of SOC Services.
• Develop and provide reports regularly.
• Collaborate with relevant internal stakeholders.
• Provide briefing to business stakeholders.

• SIEM tools (Splunk, ArcSight, RSA, McAfee ePO)
• Industry standard frameworks (ISO, NIST, PCI)
• Metrics and SLAs maintenance
• Shift scheduling for 24x7 coverage
• Modern security concepts
• Relationship management (Bank, vendors, customers)
• Strong Authentication
• End Point Security
• Internet Policy Enforcement
• Firewalls
• Web Content Filtering
• Database Activity Monitoring (DAM)
• Public Key Infrastructure (PKI)
• Data Loss Prevention (DLP)
• Identity and Access Management (IAM)

• Bachelor’s degree in information technology, Information Security/Assurance, Engineering or similar areas of study.
• At least one relevant industry certification (GCIH, GCED, CISSP, CISA, CISM, etc.).
• Experience building and maintaining a high-performance team of analysts.
• Experience maintaining metrics and SLAs.
• Ability to create shift schedules to ensure 24x7 coverage by support personnel.