Information Security Officer – KTNA 7 (Re - advertisement) at Kenya Trade Network Agency (KenTrade)

Purpose for the Job

Protecting KenTrade’s data and infrastructure from external or internal threats; and ensuring compliance with statutory and regulatory requirements regarding information access, security and privacy; Continuously carrying out information risk assessment to ensure KenTrade’s information security risks are brought under explicit management control.

Duties and Responsibilities

• Spearhead the implementation of a comprehensive information security and Data privacy program for KenTrade;
• Spearhead the implementation of and review of KenTrade’s ICT security policies, standards, procedures and guidelines;
• Lead in the design, implementation, operation and maintenance of the information security management system based on the ISO/IEC 27000 series standards, including certification against ISO/IEC 27001;
• Lead in the activities relating to contingency planning, business continuity management and IT disaster recovery in conjunction with relevant functions and third parties;
• Lead the implementation of an ongoing risk assessment program targeting information security matters;
• Collect and summarize security events and data including preparing security reports and eventual remedies to be taken;
• Administer ICT security tools, maintain security escalation and contact lists and security logs;
• Offer internal management consultancy advise and practical assistance on information security risk and control matters throughout the organization;
• Carry out information security awareness, training and educational activities;
• Undertake such other duties as may be reasonably required and which are consistent with the level of responsibility of this job.

Minimum Academic, Professional Qualifications and Experience

• Bachelor’s degree in Information Technology, Computer Science or related from a recognized institution;
• Professional qualifications in CISSM/CISA/CEH/ Operating System based
• Certification, Security+;
• Experience in Information Security Administration, IT Security compliance or IT security audit shall be an added advantage;
• Meets provision of chapter six of the Constitution.