KEY RESPONSIBILITIES

Provide tactical security expertise across various security domains as assigned from time to time in support of the Cybersecurity Specialists

Conduct Vulnerability Assessment and Penetration Testing and configuration review for infrastructure, network, web application, mobile application, endpoints, email & cloud security.

Provide technical security related support to ICT projects and changes from inception through to successful implementation.

Identify and provide solutions for cybersecurity related problems & anomalies and report violations of security policies.

Conduct continuous research and provide technical security expertise on threats affecting KCB Group information assets.

Monitor the bank’s ICT systems for indicators of compromise, investigate incidents and take appropriate steps to contain, neutralize and prevent breaches from happening in the future.

Participate in activities aimed at mitigating information and cyber risks identified by various assurance teams such as Information Risk and Audit.

Perform continuous vulnerability monitoring in the KCB group environment and report compliance failures to management for immediate remediation.

Contribute to development of KCB Group security policies and baseline standards.

Define, create, and deliver status reports and relevant metrics to the Senior Manager, Cybersecurity Operations.

Academic & Professional

Education

Bachelor’s Degree

BSc. Information Technology / Computer Science / Telecommunications / Engineering (Electrical, Electronic) RQ

Professional Qualifications

Master’s Degree

Information security certifications such as:

OSCP/ CEH/ CISA/ CISM/ CISSP/ SSCP/ CompTIA Security/ CSX-F/ SSCP/ CISA Certified in Cybersecurity

CISM/ CISSP/ CCNA/ CRISC/ Microsoft Azure Security/ ECSA MBA / MSc

At least one RQ

Several are AA

Experience

Total Minimum No of Years of Experience Required

1 year

Detail Minimum No of Years Need Type

5

Experience in IT Security 1 ES

Experience in vulnerability management and penetration testing. 1 ES

Experience in Banking / Finance 1 DE

Experience in Project 1 DE

COUNTRY: Kenya

• Provide tactical security expertise across various security domains as assigned from time to time in support of the Cybersecurity Specialists
• Conduct Vulnerability Assessment and Penetration Testing and configuration review for infrastructure, network, web application, mobile application, endpoints, email & cloud security.
• Provide technical security related support to ICT projects and changes from inception through to successful implementation.
• Identify and provide solutions for cybersecurity related problems & anomalies and report violations of security policies.
• Conduct continuous research and provide technical security expertise on threats affecting KCB Group information assets.
• Monitor the bank’s ICT systems for indicators of compromise, investigate incidents and take appropriate steps to contain, neutralize and prevent breaches from happening in the future.
• Participate in activities aimed at mitigating information and cyber risks identified by various assurance teams such as Information Risk and Audit.
• Perform continuous vulnerability monitoring in the KCB group environment and report compliance failures to management for immediate remediation.
• Contribute to development of KCB Group security policies and baseline standards.
• Define, create, and deliver status reports and relevant metrics to the Senior Manager, Cybersecurity Operations.

• Vulnerability Assessment
• Penetration Testing
• Configuration Review
• Infrastructure Security
• Network Security
• Web Application Security
• Mobile Application Security
• Endpoint Security
• Email Security
• Cloud Security
• Cybersecurity Incident Response
• Risk Management
• Policy Development
• Reporting and Metrics

• Bachelor’s Degree in Information Technology / Computer Science / Telecommunications / Engineering (Electrical, Electronic)
• Master’s Degree (MBA / MSc)
• Information security certifications such as: OSCP/ CEH/ CISA/ CISM/ CISSP/ SSCP/ CompTIA Security/ CSX-F/ SSCP/ CISA Certified in Cybersecurity, CISM/ CISSP/ CCNA/ CRISC/ Microsoft Azure Security/ ECSA