IT Security Specialist at KCB Bank Kenya

Reporting to the Senior Manager, IT Security; the IT Security Specialist will be responsible for innovation, implementation and support of systems that provide the tools for automating and securing the office environment throughout the KCB business.

Responsibilities

• Perform vulnerability assessment and penetration testing on Banks infrastructure and applications in a bid to ensure that they are secure from external or internal hacking attempts.
• Research on and provide technical security expertise on continuous persistent threats affecting the banking industry to the Senior Manager, IT Risk & Security and DDIT.
• Develop IT Security Policies, Minimum Baseline Security Standards in line with industry best practices and technologies, commensurate with risk and regulatory requirements and implementing the same cost effectively.
• Provide technical security related support to projects from inception through to successful implementation to ensure that security is in built into the applications.
• Recognize and provide solutions for IT Security related problems by identifying abnormalities and reporting violations.
• Appropriately and practically defend the information enterprise in accordance with established policies, procedures, guidelines and practices.
• Monitor internal and external threats, examine logs, events and alerts generated by multiple platforms for anomalous activity, evidence of security incidents and other error conditions that may constitute a breach in security or degradation of integrity or confidentiality of KCB Information Technology systems and information assets.
• Continuously update the IT security monitoring and assessment as required in view of the latest hacking techniques & also stay current on malware trends especially in the financial industry and also adjust the assessment accordingly to reflect the latest trends.
• Support the implementation of procedural, operational and technical Security Architecture enhancements.
• Ensure compliance to security standards, PCI/DSS, FIBS.

Qualifications

For the above position, the successful applicant should have the following:

• Preferably a Bachelors Degree in ICT or Related Field from a recognized university. A Master’s Degree will be added advantage.
• Must possess at least one security certification such as CISSP, CISM or COMPTIA+.
• MCSE and/or MCSD certification will be an added advantage.
• A minimum of 5 years supervisory experience in Information Technology with hands on experience in:
  • Active Directory Management.
  • IT Security on operating systems and databases (UNIX, Microsoft, Oracle, SQL).
  • Knowledge and skills on encryption, VPN.
• Experience in Project Implementation and User Training is desired.
• Knowledge of web programming languages (ASP, .NET, JavaScript, etc) will be an added advantage.
• Good customer service and willingness to travel.
• Wide knowledge of web application security.
• Excellent planning and organizing skills
• Excellent problem analysis and attention to detail.
• Good knowledge of various Banking operations.