The Financial Reporting Centre (FRC) (Kenya's Financial Intelligence Unit) is established under section 21 of the Proceeds of Crime and Anti-Money Laundering Act, 2009.

Job Responsibilities

• Lead the development of the ICT Security policy, framework, strategy and procedures for the Centre in line with Government policy and best practice
• Guide implementation of the information security strategy and roadmap for the Centre
• Coordinate the development and implementation of an effective information security awareness program for all staff of the Centre
• Lead in the development of a robust IT Security Business Continuity Management program, ensuring effective processes are set up and executed
• Provide continuous assurance of information systems around confidentiality, integrity, and availability
• Ensure vulnerability assessments & penetration testing is conducted and patching/remediation of vulnerabilities are done as per policy
• Drive the implementation, administration, and support of technology control systems as per the IS roadmap
• Oversee the continuous monitoring of technology assets for cyber incidents
• Ensure security incident response for effective response, containment, and recovery from security incidents or breaches
• Participate as a key stakeholder in the Centre’s Change Management governance process
• Participate and contribute towards developing and supporting IT practices
• Liaise with internal and external stakeholders to ensure the Centre achieves information security objectives
• Spearhead periodic audits, assessments, and reviews to ensure robust ICT security across the Centre’s infrastructure and systems
• Implement mentorship program for departmental staff
• Conduct performance review for direct reports to ensure effective delivery of departmental objectives
• Facilitate identification and mitigation of the department’s risks
• Review ICT network and data centres management reports and ensuring timely submission

Education:

• Academic - Bachelor’s degree in Computer Science (Bachelor’s degree in Computer Science)
• Academic - Master’s degree in Software Engineering (Master’s degree in Software Engineering)
• Academic - Master’s degree in Information Technology (Master’s degree in Information Technology)
• Academic - or equivalent qualification, from a recognized institution (or equivalent qualification, from a recognized institution)
• Academic - Master’s degree in Computer Science (Master’s degree in Computer Science)
• Academic - Master’s degree in Software Engineering (Master’s degree in Software Engineering)
• Academic - Master’s degree in Information Technology (Master’s degree in Information Technology)
• Academic - or equivalent qualification, from a recognized institution (or equivalent qualification, from a recognized institution)
• Academic - OTHER ( Shown merit and ability as demonstrated in work performance)
• Professional - Professional certification in CCNP (Professional certification in CCNP)
• Professional - Professional certification in CCNA (Professional certification in CCNA)
• Professional - Professional certification in MCSE, (Professional certification in MCSE,)
• Professional - Professional certification in MCSA (Professional certification in MCSA)
• Professional - Professional certification in MCSD (Professional certification in MCSD)
• Professional - Professional certification in N+ (Professional certification in N+)
• Professional - Professional certification in A+ OCA (Professional certification in A+ OCA)
• Professional - Professional certification in CEH (Professional certification in CEH)
• Professional - Professional certification in CISSP (Professional certification in CISSP)
• Professional - Professional certification in CISM (Professional certification in CISM)
• Professional - Professional certification in CDPSE (Professional certification in CDPSE)
• Professional - Professional certification in CEH (Professional certification in CEH)
• Professional - Professional certification in Linux+ (Professional certification in Linux+)
• Professional - Professional certification in Network+ (Professional certification in Network+)
• Professional - Microsoft Certified IT Professional (MCITP) (Microsoft Certified IT Professional (MCITP))
• Professional - relevant programming languages (relevant programming languages)
• Professional - software development methodologies or equivalent professional certification, from a recognized institution (software development methodologies or equivalent professional certification, from a recognized institution)
• Membership - Membership to a relevant professional body, and in good standing (Membership to a relevant professional body, and in good standing)

• Lead the development of the ICT Security policy, framework, strategy and procedures for the Centre in line with Government policy and best practice
• Guide implementation of the information security strategy and roadmap for the Centre
• Coordinate the development and implementation of an effective information security awareness program for all staff of the Centre
• Lead in the development of a robust IT Security Business Continuity Management program, ensuring effective processes are set up and executed
• Provide continuous assurance of information systems around confidentiality, integrity, and availability
• Ensure vulnerability assessments & penetration testing is conducted and patching/remediation of vulnerabilities are done as per policy
• Drive the implementation, administration, and support of technology control systems as per the IS roadmap
• Oversee the continuous monitoring of technology assets for cyber incidents
• Ensure security incident response for effective response, containment, and recovery from security incidents or breaches
• Participate as a key stakeholder in the Centre’s Change Management governance process
• Participate and contribute towards developing and supporting IT practices
• Liaise with internal and external stakeholders to ensure the Centre achieves information security objectives
• Spearhead periodic audits, assessments, and reviews to ensure robust ICT security across the Centre’s infrastructure and systems
• Implement mentorship program for departmental staff
• Conduct performance review for direct reports to ensure effective delivery of departmental objectives
• Facilitate identification and mitigation of the department’s risks
• Review ICT network and data centres management reports and ensuring timely submission

• ICT Security policy development
• Information security strategy implementation
• Information security awareness program development
• IT Security Business Continuity Management
• Information systems assurance
• Vulnerability assessments
• Penetration testing
• Technology control systems implementation
• Cyber incident monitoring
• Security incident response
• Change Management governance
• IT practices development
• Stakeholder liaison
• ICT security audits and assessments
• Mentorship program implementation
• Performance review
• Risk identification and mitigation
• ICT network management
• Data centre management
• Relevant programming languages
• Software development methodologies

• Bachelor’s degree in Computer Science or equivalent
• Master’s degree in Software Engineering or equivalent
• Master’s degree in Information Technology or equivalent
• Master’s degree in Computer Science or equivalent
• Professional certification in CCNP
• Professional certification in CCNA
• Professional certification in MCSE
• Professional certification in MCSA
• Professional certification in MCSD
• Professional certification in N+
• Professional certification in A+ OCA
• Professional certification in CEH
• Professional certification in CISSP
• Professional certification in CISM
• Professional certification in CDPSE
• Professional certification in Linux+
• Professional certification in Network+
• Microsoft Certified IT Professional (MCITP)
• Relevant programming languages
• Software development methodologies or equivalent professional certification
• Membership to a relevant professional body, and in good standing