Senior Officer, Information Security at Nairobi Securities Exchange

Overall Purpose

The role is responsible for planning, development and delivery of a comprehensive information security and privacy program for the NSE.
The purposes of the program include assuring that information created, acquired or maintained by NSE and its authorized users, is accessed and used in accordance with its intended purpose; to protect NSE information and its infrastructure from external or internal threats; and to assure that NSE complies with statutory and regulatory
requirements regarding information access, security and privacy.
This role serves as a Technical Advisor to the NSE and is process owner on all areas of information systems security.

Key Duties and Responsibilities
1. Work with key IT roles, data custodians and relevant stakeholders in the development/ enhancement of an Information Security (InfoSec) and infrastructure assurance
    policy;
2. Champion development, enforcement and communication of InfoSec policies, standards and procedures;
3. Lead the design and implementation of a layered information security architecture covering perimeter to end point;
4. Proactively ensuring that the InfoSec architectures at all stages of their life cycle comply with policy and regulatory requirements, and that risks due to disruption of
    operations, unauthorized modification of data, destruction of computer resources and compromise or loss of information resources are minimized;
5. Coordinate the development and delivery of an education and training program on InfoSec and privacy matters for employees and other authorized users so as to ensure
    compliance;
6. Develop and implement an Incident Reporting and Response system to address any security breaches, respond to policy violations or complaints from external parties;
7. Lead the implementation and testing of NSE’s recovery and business continuity plan;
8. Maintain ongoing knowledge of methodologies and implements best practices in InfoSec management;
9. Recommends and champions courses of action and policies that allow NSE to securely meet its organizational goals;
10. Develop and implement an ongoing risk assessment program targeting information security and privacy matters, including regular assessment and reporting on risk and
      information security posture;
11. Lead the preparation of RFPs, bid proposals and other documentation related to acquisition of information security infrastructure as well as negotiations with vendors,
      outsourcers and contractors to secure relevant products and services;
12. Conduct research, recommend and enforce InfoSec best practice standards in line with globally accepted information security frameworks; and
13. Perform any other duties as may be assigned from time to time.

Minimum requirements
i) Bachelor’s degree in Computer Science, Information technology or equivalent;
ii) Minimum four (4) years’ experience in information security, information technology or related field;
iii) Professional training/certifications in information security;
iv) Knowledge on the secure design and set up of networks;
v) Knowledge of security of relational Databases;
vi) Ability to maintain confidentiality of privileged information and to ensure absolute discretion and sensitivity to confidential matters;
vii) Hands on experience in design and deployment of information security architectures;
viii) Working knowledge of UNIX and windows operating system environments;
ix) Working knowledge of and experience in the policy and regulatory environment of information security especially in financial markets;
x) Excellent project management, written and oral communication skills;
xi) Ability to work collaboratively with a broad range of constituencies and diverse groups of people;
xii) Working knowledge of information security best practice standards; and
xiii) Working knowledge of varied network and information security technologies, such as IDS, SIEM, UTM, Endpoint security solutions etc. will be an added advantage