Assistant Manager, Information Security at DIB Bank Kenya Limited (DIBBKE)

Job Purpose

To protect financial assets, customer data, and IT infrastructure against cyber threats while ensuring compliance with regulatory standards.

Key Responsibilities

• Collect and validate data for the monthly security posture measurement cycle and prepare draft security dashboards for the Senior Manager’s review.
• Maintain the security gap register, recording each gap’s owner, severity, target date, and status.
• Follow up on open security gaps with control owners and report overdue items to the Senior Manager.
• Check remediation evidence submitted by control owners against the agreed standard and recommend closure or retention to the Senior Manager.
• Carry out Information Security risk assessments on new systems, changes and projects as assigned and prepare draft risk opinions.
• Monitor the managed SOC provider’s reports against agreed service levels and track SOC findings to close.
• Review access recertification results, privileged access reports and joiner, mover and leaver exceptions produced by I.T and log findings.
• Review the security configuration of new and changed systems against Group standards and approved baselines, as assigned.
• Complete security assessments of third-party vendors using the approved questionnaire and evidence requirements.
• Track findings from independent security testing and confirm retesting before recommending closure.
• Maintain the risk acceptance log, recording rationale, approver and expiry date, and flag acceptances near expiry.
• Gather evidence and draft responses for internal audit, external audit and regulatory requests.
• Run security awareness activities, including phishing simulations, and report on participation and results.
• Support the Senior Manager in overseeing security incident response and post-incident reviews, and track lessons learned to completion.
• Keep current with emerging threats and regulatory changes and brief the Senior Manager on their impact.
• Ensure all assigned tasks and projects are executed within the approved policies, procedures and SLAs of the department.
• Stand in for the Senior Manager Information Security on day-to-day matters in their absence.

Dimensions

• Design and maintain regular security processes to measure and improve the security posture of the Bank.

Job Complexity

• Ability to understand the related regulations and the security standards.
• Ability to assess and measure the security posture of the organization and/or third-party vendors.
• Ability to coordinate and plan for the remediation and mitigation of the identified security gaps.

Job Specification

Education

• Bachelor’s degree in Information Technology, Computer Science, Information Security or a related field from a recognized University.
• Certification in Information Security.

Training / Skills

• Information Security architecture.
• IT technology platforms across the IT domains.
• Information security management and standards or benchmarks.
• Effective application of all relevant banking policies, processes, procedures and guidelines.

Work Experience

• Minimum 4 years of experience in Cybersecurity and/or Information Security Governance.

Competencies

• Think & Act Customer – Applying
• Business & Strategic Acumen – Applying
• Ownership & Accountability – Applying
• Change & Innovation Agility – Applying
• Plan & Execute Excel – Applying
• Digital Mindset – Applying
• Foster Synergy – Applying
• Interpersonal Effectiveness – Applying