Cyber Security Administrator at Kenya Airways

Brief Description        

Set up andmaintain the system, security, focusing on hardware and software to effectivelydefend KQ's systems from attacks.

Detailed Description        

• First-line response and initial management of IT security related issues
• Security Administrators will work on responding to cyber security threats as they take place. Network management of LAN, WAN and connected servers will be part and parcel of the role.
• Ensure relevant security standards, authentication protocols, and all security related hardware and software within the organization would be vital.
• Technology Security – Day to day management
• The role will involve many day-to-day IT Security management activities. These will include managing the LAN (Local Area Network), Public Key Infrastructure (PKI) administration tasks, plus managing the WAN (Wide Area Network), and any VPN’s (Virtual Private Networks).
• Using the IT Security tools and techniques that will monitor all exploits and threats, providing an initial response as threats emerge. Regular vulnerability testing may be necessary and reporting to senior IT management may be required, especially during issues causing downtime or data loss.
• IT Security maintenance, change management, training, and support
• The Security administrator will be responsible for change management, incorporating the administration of upgrades, patches, and fixes. Tasks such as the development and implementation of new corporate security policies and staff training on awareness of cyber security threats may need your attention.
• Implement live IT security fixes, tools, countermeasures, and testing. Administrators are often involved in implementing required upgrade paths, bug fixes and workarounds for emerging IT Security issues. Testing of newly installed IT security tools, threat countermeasures and other responses

Job Requirements        

• Bachelor’s degree in Information Technology or another related field
• Information Security related training or certifications such as CISA or CEH is an added advantage.
• Experience performing information security audits or risk assessments
• Experience with various security tools to assess the organization’s security posture
• Familiarity with security auditing processes
• Well versed with Linux commands, scripting as well as windows security controls adoption
• Set up of systems to identifying intrusions, configuring these to suit the needs of the organization
• Analyzing risks and conducting ongoing security assessments
• 2 years of advanced IT skills with high level of information security experience and expertise

Additional Details        

• Knowledge of information security risk management frameworks and compliance practices.
• Knowledge of securing network technologies, applications, and operating systems.
• Experience responding to, analyzing, and communicating information security incidents and performing forensic.
• Excellent interpersonal, communication, and presentation skills, including formal report writing experience.
• Understanding of common security standards and regulations relating to a higher education environment (e.g., PCI DSS, NIST, ISO27001, GDPR etc.)
• Capable of enforcing security best practices in line with the National Institute of Standards and Technology