Deputy Commissioner, Information Security and Data Governance at PKF firms

About the position

The jobholder is responsible for providing overall leadership in the management of Information Security and governance of corporate data assets to ensure security, quality, availability, accessibility and utilisation of data to drive business decisions in Tax Administration.

Duties and Responsibilities

• Provide leadership in formulation and review of divisional strategies and policies to effectively respond to the needs of user departments.
• Provide vision and expertise in enterprise data governance to enhance business outcomes and transform KRA into a data intelligent Tax Administration
• Provide leadership in the development and execution of a comprehensive cybersecurity strategy to protect the Authority’s information assets by proactively identifying, mitigating, and preventing security threats.
• Oversee the sourcing and capacity planning for the required Information Security & Data Governance for protection of Corporate IT assets.
• Drive the establishment, implementation, and continuous improvement of an effective ICT governance framework that ensures accountability, strategic alignment, and optimal utilization of ICT resources.
• Provide strategic oversight in the planning, design, deployment, and maintenance of the Authority’s network and communication infrastructure, ensuring high availability, scalability, and security
• Define and enforcing enterprise-wide ICT procurement policies, standards, and best practices to optimize acquisition, deployment, and lifecycle management of ICT software, hardware, and equipment.
• Enforce full adoption and compliance with ISMS guidelines by embedding best practices, policies, and controls that enhance the Authority’s information security posture.
• Spearhead the development, implementation, and continuous review of the Authority’s ICT policies, strategies, standards, procedures, and systems to align with organizational goals and emerging technological advancements.
• Drive the strategic adoption of emerging technologies and automation initiatives to enhance the Authority’s operational excellence, efficiency, and service delivery.
• Ensure conformity to ISO (9001/2015 NS 27001/2013) and data security requirements.
• Provide leadership in development of frameworks, workplans and budget for execution of infrastructure management policy and strategies to ensure the Division has a robust system and processes of accountability, risk management, internal controls and business continuity.
• Oversee robust performance management within the division through providing oversight of the delivery of the annual performance contract.
• Provide leadership in the Division through supervision, coaching, mentoring, training and development of the divisional staff to ensure an effective and motivated team. 

Person specifications:

• Must have a Bachelor’s degree in either Computer   Science, Information Communication Technology, Business Information Technology or relevant and equivalent qualification from a recognised institution.
• A Master’s degree in a relevant field will be an added advantage.
• Must have a minimum of ten (10) years relevant experience, at least five (5) of which should be in senior and / or middle Management levels.
• Must have professional qualification / membership to a professional body and be in good standing.
• Meet the requirements of Chapter Six of the Constitution 2010

 Key competencies:

• Strategic leadership skills and negotiation skills.
• Excellent communication and strong interpersonal skills.
• Innovative thinking.
• Organisational skills.
• Resilience and adaptability.
• Critical thinking and problem-solving.
• Customer- centric approach.
• Professionalism, ethical judgment and integrity.