Information Security Manager at New Kenya Co-operative Creameries Limited

NKCC/HR.709 / ISM/ 02/06/2021

Job Purpose

Reporting to the Head of ICT the Information Security Manager will be responsible for securing the enterprise information by managing its design, implementation, and enforcing the security controls, safeguards, policies, and procedures while maintaining an up-to-date knowledge of the ICT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.

Key Responsibilities

1. Participate in the development of policies, standards and procedures and ensure they support compliance with organizational, legal, and statutory requirements.
2. Oversee dissemination of policies and procedures through-out New KCC.
3. Ensure compliance and enforcement of the security policies and submit regular compliance reports.
4. Develop and implement an Incident reporting and response system to address security breaches and co-ordinate with the relevant external authorities.
5. Develop and implement an on-going risk assessment program that targets information security and privacy matters, recommend methods for vulnerability assessment, and oversee vulnerability testing.
6. Be part of the recovery planning and keep abreast with all security related legislations, regulations, advisories, alerts, and vulnerabilities that affect New KCC and its mission.

Person specifications

1. Eight (8) year’s relevant work experience, at least 4 years in a similar position in a comparable organization
2. Bachelor’s degree in Information Technology / Computer Science or related field
3. Linux certification, Certified Information Security Manager (CISM)/Certified Information Systems Security Professional (CISSP) or related certification.
4. Working knowledge of an ERP system
5. Management course lasting not less than four (4) weeks cumulative.

Key Competencies and skills

• Demonstrated merit and ability as reflected in work performance and results.
• Demonstrate leadership and managerial capabilities.
• Good communication and negotiation skills
• Good interpersonal skills
• Team player
• Possesses good problem-solving skills.
• Familiarity with network computer applications – WAN, LAN, Email Infrastructure