Assistant Manager, Cyber Security Operations Analyst at NCBA Group

Job Purpose Statement

This role is responsible for implementation and support of operational components of Enterprise Information Security. The role will ensure that controls systems are managed and administered well, and will drive implementation of security controls as defined by the Information Security roadmap, best practice and industry guidelines. The role will also play a part in ensuring that information systems are compliant to information security baseline standards, by recommending and working with other technology stakeholders in defining these standards within these systems.

Key Results Areas

Security Design 20% 

• This role will work with various stakeholders to identify and design the appropriate security tools and controls, in line with the Bank’s architectural principles.

Information Security Roadmap & Administration 60% 

• This role will implement and support security controls systems (including Network Access Control, AntiMalware, Database Activity Monitoring, Fraud Management System etc.). This includes daily health checks, on-boarding of new assets, implementing of new security solutions, improvements on existing control systems etc.
• The role will also implement and support cloud security technologies, including implementation and administration of cloud-based security controls.

Information Security Processes 20% 

• This role will define and implement information security processes related to vulnerability management, patch management, malware management etc., ensuring that these practices are in place and implemented across the Bank.

Ideal Person Specifications

• A Bachelor’s degree in Computer Science, Information Technology or related field.
• Minimum 6 years working experience in a busy IT environment.
• Certification in a systems security related area, such as CISSP or CISM.
• Knowledge of technical infrastructure, networks, databases and systems.
• Project management skills preferred.
• Experience in conducting compliance assessments or performing security reviews and risk assessments.