Security Engineer at Jubilee Insurance

Job Ref. No: JLIL127

Role Purpose

The job holder will be primarily responsible for recommending, enforcing, and monitoring technology related security procedures to secure the company’s Technology and Information Systems

Main Responsibilities

• Review, development and implementation of IT Security policies and procedures.
• Review, monitor and maintain security systems in accordance with corporate policies.
• Implementing security standards and best practices for the organization and recommending security enhancements to management as needed.
• Vulnerability Management. Conducting periodic scans of networks to determine existence of any vulnerabilities and making sure remediation has been done.
• Investigate security violations/breaches and report such violations as necessary plus provide remediation actions.
• Forming part of the incident response team that investigates security breaches and investigate security violations/breaches and report such violations as necessary plus provide remediation actions.
• Design, implement, manage, monitor, and troubleshoot network security defense and monitoring tools, including configuration management, firewalls, IDS/IPS, and monitoring systems and tools.
• Enhance security awareness by providing orientation, educational programs, and on-going communications.
• Participate in all technical projects, integrations, enhancements and enforce security best practice requirements in line with information security policies and standards.
• Enforce compliance of IT regulations and IT Cybersecurity policies by developing a monthly scorecard for each department based on how well they are performing in terms of Cyber Security compliance.
• Manage Jubilee’s Firewall and ensure continuous review of rules and policies created to protect the company’s information systems from external threats.
• Generate ad hoc/weekly/monthly Information Security reports.
• Manage internal and external IS audit requests and enforce recommendations.
• Provide security requirements for all technical projects in line with information security policies and standard requirements.
• Develop a secure network architecture design and conduct network security reviews.

Functional Skills

• Experience in implementation of ISO 27000 & COBIT.
• Knowledge of security policy standard development, secure infrastructure design & reviews.
• Working knowledge and experience with virtualization, remote access, and secure mobile technologies.
• Leadership and communication.
• Business continuity Planning (BCP) and Data Recovery (DR) planning and management.
• Endpoint Management (EDR, Antivirus and Encryption).
• Cyber Security Risk identification, categorization, and management.

Qualifications

• Bachelor of Science Degree in Computer Science or other Computer related field from a recognized University
• Information Security Qualification: CCSP/CISSP/CISM/CISA/CEH
• Networking Competencies: MCSE, CCNA/CCNP

Relevant Experience

• 5 years working experience in information and network security support in a large or medium sized organization.