IT Information Security Officer at Old Mutual Kenya

Job Description

• Support the Information Security office on IT security related matters
• Receive and respond to the security related business requirements
• Interface with technical, risk and governance personnel and other
• teams as required in the process of mitigating systems security.
• Initiate escalation procedure to counteract potential
• threats/vulnerabilities. (Vulnerability management)
• Appropriately inform and advise management on security incidents and incident prevention
• Document and conform to approved processes related to security
• Analyze and fix potential infrastructure security incidents
•  Develop and deploy line 1 technical controls to safeguard systems
• against accidental or unauthorized modification, destruction, access or
• Ensure that encryption and data loss prevention configurations are
• Implement 2 factor authentication for VPN and other critical logins
• Continuously evaluate market security offerings and make an informed selection decision.
• Management of Software whitelisting on all entity devices to ensure that only legal software runs on the business machines endpoint protection
• Managed the SIEM projects
• Systems log monitoring and analysis
• Update the proactive mitigation plans and ensure execution
• Escalate specific security areas of concern through a defined process
• Ensure that backed command injections are identified and reported
• Identify and remediate operational gaps between configurations management software and approved business changes. security awareness is attained.
• Provide technical reporting details for all security incidents
• Design and execute VAPT and Red Teaming
• Cyber security simulation
• Continuously review and recommend the security architecture and monitoring tools that address the security risks the Business is exposed to.
• Ensure the CIA security triad is effectively addressed in all technical phases of the infrastructure projects.

Skills

• Cybersecurity
• Infrastructure Security
• Security Information and Event Management (SIEM)
• Systems Security
• Technical Controls