Deputy Commissioner, Information Security and Data Governance at PKF firms

Job Summary
The jobholder is responsible for providing overall leadership in the management of Information Security and governance of corporate data assets to ensure security, quality, availability, accessibility and utilisation of data to drive business decisions in Tax Administration.

Duties and Responsibilities

• Provide leadership in formulation and review of divisional strategies and policies to effectively respond to the needs of user departments.
• Provide vision and expertise in enterprise data governance to enhance business outcomes and transform KRA into a productive data intelligent Tax Administration
• Provide leadership in the development and execution of a comprehensive cybersecurity strategy to protect the Authority’s information assets by proactively identifying, mitigating, and preventing security threats.
• Oversee the sourcing and capacity planning for the required Information Security & Data Governance for protection of Corporate IT assets.
• Drive the establishment, implementation, and continuous improvement of an effective ICT governance framework that ensures accountability, strategic alignment, and optimal utilization of ICT resources.
• Spearhead formulation, implementation and review of the Divisional annual work plans.
• Provide strategic oversight in the planning, design, deployment, and maintenance of the Authority’s network and communication infrastructure, ensuring high availability, scalability, and security
• Define and enforcing enterprise-wide ICT procurement policies, standards, and best practices to optimize acquisition, deployment, and lifecycle management of ICT software, hardware, and equipment.
• Enforce full adoption and compliance with ISMS guidelines by embedding best practices, policies, and controls that enhance the Authority’s information security posture.
• Spearhead the development, implementation, and continuous review of the Authority’s ICT policies, strategies, standards, procedures, and systems to align with organizational goals and emerging technological advancements.
• Drive the strategic adoption of emerging technologies and automation initiatives to enhance the Authority’s operational excellence, efficiency, and service delivery.
• Ensure conformity to ISO (9001/2015 NS 27001/2013) and data security requirements.
• Provide leadership in development of frameworks, workplans and budget for execution of infrastructure management policy and strategies to ensure the Division has a robust system and processes of accountability, risk management, internal controls and business continuity.
• Oversee robust performance management within the division through providing oversight of the delivery of the annual performance contract.
• Provide leadership in the Division through supervision, coaching, mentoring, training and development of the divisional staff to ensure an effective and motivated team. 

Person specifications:

For appointment to this job, the candidate must have:

• A Bachelor’s degree in any of the following disciplines: Computer   Science, Information Communication Technology, Business Information Technology or relevant and equivalent qualification from a recognized institution.
• A Master’s degree in a relevant field will be an added advantage.
• Minimum of ten (10) years relevant experience, at least five (5) of which should be in senior and/or middle management levels.
• Professional qualification and membership to a relevant professional body in good standing.
• Meet the requirements of Chapter Six of the Constitution 2010.

Professional certification in any of the following areas:

• CEH, CISSP, ECIH, CFHI, CISM or CISA.
• Certification in Project Management and IT Governance

 Key competencies:

• Strategic leadership skills and negotiation skills.
• Excellent communication and strong interpersonal skills.
• Innovative thinking.
• Organisational skills.
• Resilience and adaptability.
• Critical thinking and problem-solving.
• Customer- centric approach.
• Professionalism, ethical judgment and integrity.