Job Opportunities at Co-operative Bank of Kenya - 2 Positions

Ref No ISOO/SSD/2018

Are you a self-starter? Do you possess the ability to operate independently within minimum guidance yet producing measurable results?

We are looking for an experienced professional with an agile mindset and a capability to influence organizational direction for application and infrastructure security who will be responsible for end-to-end oversight of all security programs designed to protect infrastructure footprint.

Reporting to Head-ICT Security Operations, the role holder will enforce security policies to protect the organization’s computer infrastructure, networks and data by identifying vulnerabilities caused by weaknesses or flaws in software and hardware that could expose the infrastructure to a security breach.

He/she will evaluate the effectiveness of existing security measures, such as firewalls, password policies and intrusion-detection systems and make recommendations to improve security based on their assessments and knowledge of current and emerging threats.

Responsibilities

• Develop and maintain a prioritized asset and applications register of all ICT assets in the bank.
• Configure reviews across Infrastructure Devices, Servers and Databases to ensure that a threat-aware approach to systems and infrastructure setup is adopted.
• Enforce policies, secure configurations and rulesets that will enforce protection of data and limit user access as appropriate. Ensure all bank systems are appropriately hardened to enforce protection of data.
• Enforce patch management across all enterprise systems. Ensure that all systems are regularly updated and report on discrepancies based on criticality.
• Ensure firewalls, switches and other infrastructure are up to date and are running optimized security configurations and policies.
• Conduct regular penetration testing exercises on the Bank’s infrastructure to ascertain robustness of the security configurations and deployed tools in line with regulatory recommendations.
• Certify all system configurations are secure and adequate security controls are in place before any system goes live.  Act as the Change & Configuration Manager and work with Technical Teams, Service Managers to ensure systems promoted to live are compliant to internal policy.
• Coordinate and conduct red team tests with the SOC / risk team to assure on IOC (indicators of compromise) detection capabilities.
• Communicate security risk through documentation, conversation, and presentations with an objective of driving awareness and informed decision making for the ICT team.

Requirements

• An IT related Bachelor’s degree or Business related degree with relevant IT Security professional qualifications i.e. Cisco Certified Network Associate (CCNA)/ Certified Information Systems Auditor (CISA) certification/ Certified Information Systems Security Professional (CISSP) CCIE (Security), CEH, CHP or other relevant security certifications.
• At least 3 years’ experience in leading ICT Security Services Strong knowledge of security architectures and technologies including assessment, methodologies, compliance standards etc.
• Knowledge of security standards and compliance like PCI, HIPAA, Sarbanes Oxley, ISO 27001, NIST, CSF, COBIT, ITIL, SANS 20.
• Good understanding and knowledge of security assessment, vulnerability management, penetration testing methodologies and toolsets.
• Working knowledge and experience in penetration testing and vulnerability assessments.
• Knowledge of common cybersecurity threats and sources of cybersecurity information.
• Good understanding and knowledge of risk assessment, risk procedures, security assessment, vulnerability management, penetration testing.
• Excellent Business Relationship, interpersonal communication, presentation and Stakeholder management skills.