Information Systems Security & Assurance Officer at Higher Education Loans Board (HELB)

Job Details

A vacancy has arisen for the position of Information Systems Security & Assurance Officer (ISSO).

The Board is looking for a highly technical, competent, passionate, dedicated and self-driven individual of high integrity who is able to demonstrate strong leadership skills of Information systems security and assurance.

The Position

Reporting to the Chief Information Officer, Information Systems Security & Assurance Officer (ISSO) will be responsible for developing and implementing an information security program, which includes procedures and policies designed to protect enterprise communications, systems and assets from both internal/external threats and assurance of business recovery strategies through an elaborate BCP/DRS Governance Framework.

The ISSO will work alongside other IT services portfolio managers to implement cybersecurity products and services and to manage disaster recovery and business continuity plans.

Key Responsibilities

• Provide Technical expert advice on infrastructure and security.
• Conducting employee security awareness training and establish metrics to measure the effectiveness of this security training program.
• Ensure that security is embedded in the project delivery process by providing appropriate information security policies, practices, and guidelines
• Undertake System Administration for information security related appliances and solutions.
• Play an Advisory role on information security, innovations and technical developments.
• Work with service providers to ensure service delivery in a secure manner.
• Handle security incidents reported by users, identifying security objectives and metrics.
• Coordinate the development of implementation of incident response plans and procedures to ensure that business-critical services are recovered in the event of a security incident.
• Evaluate and modify system’s security configuration and enforcing adherence to security practices as per the IT Security Policy.
• Manage power backups at the datacentre and across the organization at the desktop level.
• Scanning of the Institution’s environment to identify, diagnose and mitigate information security threats.
• Testing all system backups to ensure business continuity at the Data Recovery Site.
• Maintain a log and report of all information security incidents and mitigations.
• Enforce implementation of Information security policy – Access control policy, Acceptable use of assets, Risk identification, assessment, treatment methodology and maintenance of ICT Risk register and monitoring of Key Risk Indicators.

Qualifications, Knowledge & Experience

• Applicants must be holders of a Bachelor’s degree in Information Technology, Electrical / Telecommunications Engineering or equivalent qualification from a recognized institution.
• At least four (4) years working experience in a busy ICT environment at least two (2) of which as an IS Security manager, IS Security Administrator or IS Security specialist.
• Wide experience on deployment of routers, switches, VLANS and firewalls.
• Working knowledge of windows and Linux operating systems and Servers.
• CISSP/CEH/CSA+/CASP/MCSE/ISACA(CISA/CISM/CISA/CRISC/CGEIT), Database Certifications.

Personal Skills and Attributes

• Personal integrity;
• Possession of good interpersonal skills and networking skills;
• Highly analytical, interpretive, report writing and presentation skills
• Excellent interpersonal and communication skills;
• Ability multi task to work under pressure and achieve results within deadlines
• Good oral and written communication skills
• Quick learner and adaptability
• Team player
• Ability to work with strict deadlines
• Project management skills
• Mastery of operating systems and computer Hardware skills

Leadership and Integrity

Candidates who are shortlisted for interviews will be expected to prove their compliance with Chapter 6 of the Constitution of Kenya 2010 by obtaining and presenting during interview clearance/compliance certificate from the following organizations:

• Kenya Revenue Authority;
• Higher Education Loans Board;
• Ethics and Anti-Corruption Commission;
• Directorate of Criminal Investigations (Certificate of Good Conduct) and;
• Credit Reference Bureau.