For many years, Royal Mabati® has supported many clients succeed through our varied solutions and products. We are a multinational company that primarily deals with roofing materials, starting out with a factory in Nairobi since our inception in 2005. Today, we’re one of the leading manufacturers of roofing products with over 10 distribution centers acr...

Read more about this company

Job Purpose

The IS Security Manager protects the company's data, systems, and physical technology assets from evolving cyber and physical threats. The role runs the security program, oversees systems administration for security platforms, and leads the security analyst and intern team.

Job Description

Cybersecurity, Privacy & Resilience

• Operate a risk-based security program covering identity, network, endpoint, and application layers.
• Enforce Zero Trust principles, continuous monitoring, and periodic disaster-recovery testing.
• Own vulnerability management and coordinate timely closure of critical findings.

Security & Surveillance

• Manage physical security systems -- cameras, access control -- and integrate them into a unified Security Operations Centre (SOC) view alongside digital monitoring.
• Lead incident monitoring, triage, and digital forensics for security events.

Systems Administration

• Oversee administration of security-relevant systems (identity, directory services, security tooling) in coordination with Infrastructure.
• Maintain hardening standards and secure configuration baselines across managed systems.

Team & Governance

• Lead and develop security analysts and interns, building a bench of certified security talent.
• Report security posture, incidents, and risk trends to the CIO and relevant governance forums

Qualifications & Experience

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 3-5+ years in information security, with experience leading analysts or a security operations function.

Key Competencies

• Working knowledge of Zero Trust architectures, SOC operations, and digital forensics.
• Experience integrating physical security (CCTV, access control) with digital monitoring.
• Relevant certifications (e.g., CISSP, CISM, Security+) preferred.
• Sound judgment and composure when managing live incidents.
• Strong reporting and communication skills for board- and governance-level updates.
• Ability to mentor and grow junior security talent.

• Operate a risk-based security program covering identity, network, endpoint, and application layers.
• Enforce Zero Trust principles, continuous monitoring, and periodic disaster-recovery testing.
• Own vulnerability management and coordinate timely closure of critical findings.
• Manage physical security systems -- cameras, access control -- and integrate them into a unified Security Operations Centre (SOC) view alongside digital monitoring.
• Lead incident monitoring, triage, and digital forensics for security events.
• Oversee administration of security-relevant systems (identity, directory services, security tooling) in coordination with Infrastructure.
• Maintain hardening standards and secure configuration baselines across managed systems.
• Lead and develop security analysts and interns, building a bench of certified security talent.
• Report security posture, incidents, and risk trends to the CIO and relevant governance forums

• Working knowledge of Zero Trust architectures, SOC operations, and digital forensics.
• Experience integrating physical security (CCTV, access control) with digital monitoring.
• Sound judgment and composure when managing live incidents.
• Strong reporting and communication skills for board- and governance-level updates.
• Ability to mentor and grow junior security talent.

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or related field.
• Relevant certifications (e.g., CISSP, CISM, Security+) preferred.