Principal Analyst, Cyber Security Infrastructure at Central Bank of Kenya

Job Summary 

• Serving as a technical security lead, the role holder is responsible for the administration, operations, maintenance, and optimization of cybersecurity technologies to achieve 99.999% service availability. The Principal Analyst drives cybersecurity posture improvements, mentors junior staff, and ensures operational excellence across security infrastructure.

Key Responsibilities

• Strategic & Operational Alignment: Contribute to the overall achievement of the Bank’s strategic objectives by implementing cybersecurity policies, baselines, standards, and processes to mitigate cyber risks.
• Infrastructure Management & Uptime: Maintain cybersecurity tools and services to guarantee 99.999% uptime, manage deployments, upgrades, incident resolution, and execute patching and vulnerability management programs.
• Technical Troubleshooting & Support: Coordinate Level 2 and Level 3 troubleshooting activities, handle change management and documentation, enforce KPIs and SLAs, and provide seamless support to staff and external partners.
• Audit & Metric Reporting: Support internal and external audit remediation activities, maintain control adequacy, and deliver periodic reporting on cybersecurity metrics and KPIs.
• Team Leadership & Mentorship: Mentor junior team members to drive operational excellence, efficiency, and professional growth within the cybersecurity operations unit.

Qualifications

• Bachelor’s Degree in Electrical Engineering, Computer Science, Information Technology, or a related technical field.
• Network Security Certification: Mandatory holding such as Cisco Certified Network Professional (CCNP) Security, CCIE Security, Check Point Certified Security Administrator (CCSA), or Check Point Certified Security Expert (CCSE).
• Information Security Certification: At least one globally recognized credential such as CISSP, CHFI, CISM, CISA, OSCP, or CEH.
• Added Advantage: Professional certification in project management.

Experience & Technical Competencies

• Minimum of 5 years of hands-on experience working with information security technologies and controls, including IDS, firewalls, VPN administration, content filters, security scanning tools, antivirus, encryption, penetration testing, and vulnerability assessments.
• Proven background in IT networks, systems administration, or user support focused on implementing and administering cybersecurity solutions.
• Advanced working knowledge of endpoint and network security solutions, databases, web applications, big data, cloud/virtualization environments, and microservices technologies.