The Digital Health Agency (DHA) is a government body dedicated to transforming healthcare delivery through the integration of cutting-edge digital technologies. Our mission is to enhance healthcare accessibility, improve patient outcomes, and ensure data security by developing and maintaining a comprehensive digital health ecosystem across Kenya.

Responsibilities

• Initiating the development of cybersecurity policies, strategies, standards, guidelines & procedures
• Coordinating the review of cyber security measures through audits, penetration tests, and other evaluations
• Analyzing cyber security reports to advise on improved security measures, mitigate future risks and take necessary actions to prevent similar breaches from occurring again
• Ensuring updating of policy documents to address emerging threats, changes in regulations, or advancements in cybersecurity security technologies
• Overseeing the review of the disaster recovery plan and strategies by incorporating new technology and lessons learned from actual events or drills
• Overseeing review of the recovery time objectives and recovery point objectives after disruptions to meet evolving business needs.
• Ensuring all disaster recovery policies and procedures comply with industry standards, legal requirements, and other healthcare-specific regulations.
• Ensuring detailed records of all disaster recovery planning, tests, and incident responses for audit purposes and compliance verification are available for reference.
• Overseeing the development of mechanisms for logging and auditing data transfers to ensure compliance with policies.
• Ensuring the development of relevant technical skills and service knowledge for staff within the cybersecurity division.
• Coordinating the preparation of work plans and budgets for cybersecurity division.
• Overseeing the execution of the approved sectional work plans and budgets
• Overseeing performance improvement plans in the division
• Ensuring preparation of all monthly, quarterly, and annual reports for the division.

Requirements

For an appointment to this grade an officer must have: -

• Cumulative period of fifteen (15) years cumulative relevant work experience three (3) of which must have been in the grade of Assistant Director ICT, Cyber Security or in an equivalent or comparable position.
• Bachelor's degree in any of the following disciplines; Computer Science, Information Technology, Information Communication Technology or any other equivalent qualification from a recognized institution.
• Master's degree in any of the following disciplines: - Computer Science, Information Technology, Information Communication Technology or any other equivalent qualification from a recognized institution.
• Relevant Certifications in Cybersecurity
• Certificate in Leadership Course lasting not less than four (4) weeks from a recognized institution.
• Professional certification in Project Management Professional (PMP) or PRINCE2 Practitioner is an added advantage;
• Valid practicing certificate from a relevant professional body where applicable;
• Membership to a relevant professional body where applicable and in good standing;and
• Demonstrated experience in project management, preferably within ICT digital transformation or public-sector programmes is an added advantage; and
• Demonstrated a high degree of professional competence, Managerial and administrative capability as reflected in work performance and results.

• Initiating the development of cybersecurity policies, strategies, standards, guidelines & procedures
• Coordinating the review of cyber security measures through audits, penetration tests, and other evaluations
• Analyzing cyber security reports to advise on improved security measures, mitigate future risks and take necessary actions to prevent similar breaches from occurring again
• Ensuring updating of policy documents to address emerging threats, changes in regulations, or advancements in cybersecurity security technologies
• Overseeing the review of the disaster recovery plan and strategies by incorporating new technology and lessons learned from actual events or drills
• Overseeing review of the recovery time objectives and recovery point objectives after disruptions to meet evolving business needs.
• Ensuring all disaster recovery policies and procedures comply with industry standards, legal requirements, and other healthcare-specific regulations.
• Ensuring detailed records of all disaster recovery planning, tests, and incident responses for audit purposes and compliance verification are available for reference.
• Overseeing the development of mechanisms for logging and auditing data transfers to ensure compliance with policies.
• Ensuring the development of relevant technical skills and service knowledge for staff within the cybersecurity division.
• Coordinating the preparation of work plans and budgets for cybersecurity division.
• Overseeing the execution of the approved sectional work plans and budgets
• Overseeing performance improvement plans in the division
• Ensuring preparation of all monthly, quarterly, and annual reports for the division.

• Cybersecurity policies
• Cybersecurity strategies
• Cybersecurity standards
• Cybersecurity guidelines
• Cybersecurity procedures
• Cyber security measures
• Audits
• Penetration tests
• Cyber security reports analysis
• Disaster recovery plan
• Recovery time objectives
• Recovery point objectives
• Disaster recovery policies
• Disaster recovery procedures
• Logging mechanisms
• Auditing data transfers
• Technical skills development
• Service knowledge development
• Work plan preparation
• Budget preparation
• Project management
• ICT digital transformation
• Public-sector programmes

• Bachelor's degree in Computer Science, Information Technology, Information Communication Technology or any other equivalent qualification from a recognized institution.
• Master's degree in Computer Science, Information Technology, Information Communication Technology or any other equivalent qualification from a recognized institution.
• Relevant Certifications in Cybersecurity
• Certificate in Leadership Course lasting not less than four (4) weeks from a recognized institution.
• Professional certification in Project Management Professional (PMP) or PRINCE2 Practitioner is an added advantage
• Valid practicing certificate from a relevant professional body where applicable
• Membership to a relevant professional body where applicable and in good standing