Information Security Specialist (Email & Cloud) at KCB Bank Kenya

The Position:

The Bank’s Group Information Security Department is charged with the responsibility of protecting and safeguarding KCB Group’s information assets.

The Information Security Specialist (Email and Cloud) is responsible for maintaining the integrity and confidentiality of the organization’s data while in use, in motion and in situ, through preventing, detecting, and resolving security threats to KCB Group email, collaboration, and cloud infrastructures. The holder is also responsible for the deployment, testing and maintenance of security solutions for email, collaboration, and cloud infrastructure.

Key Responsibilities:

• Administer, optimize, and support the Bank’s email security solutions, perimeter email security, collaboration security, and cloud-based security solutions in compliance with the Bank’s policies and standards.
• Collaborate with the Cybersecurity Intelligence and Security Operations Centre (CiSOC) in the continuous monitoring and defence of the Bank’s email, collaboration, and cloud infrastructure for cybersecurity threat indicators, assist to detect, report, and respond to email, collaboration, and cloud security violations/incidents.
• Appropriately and practically defend the Bank’s cloud deployments, email, and collaboration infrastructure, in accordance with established policies, procedures, guidelines and practices.
• Develop Email, Collaboration, and Cloud Security Policies and Minimum Configuration Baseline Standards in line with industry best practices and technologies commensurate with risk and regulatory requirements and implementing the same cost effectively.
• Define, create, and deliver compliance reports and relevant metrics in Email, Collaboration, and Cloud security to senior management, utilizing automation where deemed fit.
• Provide technical email and cloud security related support to projects from inception through to successful implementation in a bid to ensure that email security and overall cloud security is built in from project inception.
• Drive the adoption of cloud security solutions, working collaboratively with other Information Security specialists and teams to identify, implement and monitor such security solutions.
• Conduct continuous audit of email and cloud infrastructure security configuration of all email and cloud infrastructure, including but not limited to Exchange, Email Security Gateways, Azure cloud, and Office 365 tools to provide optimum security, performance, and availability.
• Provide input into Information Security risk and control self-assessments by leveraging specialized knowledge in email, collaboration, and cloud security.
• Research on and provide technical email, collaboration, and cloud security expertise in the Group Information Security department.

The Person:

For the above position, the successful applicant should have the following:

• Bachelor’s degree in IT/ Computer Science/ Telecommunications/ Engineering (Electrical or Electronic) or related field.
• Professional Qualifications in CISSP/ CCSP/ Microsoft Security Certification/ Azure Security Engineer/ Microsoft 365 Certified Security Administrator.
• A minimum of 5 years’ experience in Information Technology; with at least 3 years’ experience in Information Security. 
• 2 years’ experience in Email and Cloud Security Administration (Secure Email Gateway, Azure Security, Office 365 Security.
• 2 years’ experience in System/ Database/ Network Administration.
• Experience in Banking Operations is desired.