InfoSec Governance & Technical Assurance at Equity Bank Kenya

Mission/ Core purpose of the Job:

Oversee and run the security strategy implementation, technical assurance and service management capabilities across the various security domains in EQUITY network, infrastructure and systems. The role involves leading a team that is responsible for continuous review and implementation of security strategic program initiatives, policies, technical standards, operational technology and security processes in alignment to Group policies and latest global threats, ensuring optimal performance of the security services and identifying control efficiencies in how security is operated across all domains. The incumbent will also lead technical security assurance efforts on all Technology service areas to ensure audit compliance and minimized risk exposure. The role provides a holistic management, governance and specialist skills to drive implementation of appropriate security controls in the organisation and drive strategy implementation.  

Context:

1. Security is managed cross functionality across Equity businesses, including subsidiaries
2. The individual needs to be able to work in a highly pressured planning and operational environment
3. ISO 27001, OWASP, NIST, SANS and Privacy Acts
4. Fast changing, regulated business environment
5. The Technology Security area has to deal with the rapid advancement of systems and technology within the following areas:
6. Deal with and environment that is highly regulated and legislated
7. Operate in a scarce skills & highly specialised systems environment
8. Requirement for single version of the truth drive across EQUITY South Africa
9. High data volumes