Principal Officer; Cyber Risk Governance Security & Control at Safaricom Kenya

DESCRIPTION

We are pleased to announce the following vacancy in the Cyber Security Department within the Corporate Security division. In keeping with our current business needs, we are looking for a person who meets the criteria indicated below:

Reporting to the Senior Manager - Cyber Security Governance, Risk and Control, the successful candidate will be responsible for ensuring that the organization’s cyber security risks are under explicit management control and as well coordinate strategic integration of cyber security programs within Safaricom. He or she will be part of the team that drives compliance to internal and global cyber security related policies and standards, Vodafone Cyber Security Baseline controls and applicable Kenyan laws and regulations.

Key Responsibilities:

• Lead in continual review and update of security policies, standards and guidelines in response to the ever-changing cyber threats in coordination with Enterprise Risk Management team.
• Drive compliance to internal and global cyber security related policies and standards, Vodafone Cyber Security Baseline controls and applicable Kenyan laws and regulations.
• Lead in coordination of stakeholders to deliver on targets or agreed business outcomes.
• Lead in coordination of periodic independent assurance of critical products and services.
• Coordinating implementation of recommendations from independent assessments.
• Lead cyber risk assessments to determine cyber risk profile and define treatment plans.
• Recommend cyber security services improvement plans.
• Coordinate projects handover process within the cyber security functions.
• Continually review, implementation and improvements of the user access governance process.
• Coordinate periodic cyber security knowledge transfer, awareness sessions and phishing simulations to staff in line with strategy.
• Support implementation of the Managed Security Services strategy and roadmap.
• Participate actively in cyber security events and trade shows, reporting and presentations.
• Communications, reporting and presentations skills.

QUALIFICATIONS

• Bachelor’s Degree in Electrical Eng./Computer Science/ Information Technology (or equivalent) from a recognized university.
• At least one professional Information Security Qualification: CISM/CISA/CISSP/CEH.
• At least 4+ years proven experience with Cyber Security related Standards (ISO 27001, PCI-DSS, etc.).
• Proven experience with GDPR, Kenyan Data Protection laws, CBK guidelines on Cyber Security amongst others.
• At least 2+ years of hands on experience in managing Cyber Security technologies and operations.