Senior Information Security Officer – KTNA 6 at Kenya Trade Network Agency (KenTrade)

Reports to: Assistant Manager, IT Security

Purpose for the Job

Protecting KenTrade’s data and infrastructure from external or internal threats; and ensuring compliance with statutory and regulatory requirements regarding information access, security and privacy.
Continuously carrying out information risk assessment to ensure KenTrade’s information security risks are brought under explicit management control

Duties and Responsibilities

1. Spearhead the implementation of a comprehensive information security and Data privacy program for KenTrade;
2. Spearhead the implementation of and review of KenTrade’s ICT security policies,
3. standards, procedures and guidelines;
4. Lead in the design, implementation, operation and maintenance of the information security management system based on the ISO/IEC 27000 series standards, including certification against ISO/IEC 27001;
5. Lead in the activities relating to contingency planning, business continuity management and IT disaster recovery in conjunction with relevant functions and third parties;
6. Lead the implementation of an ongoing risk assessment program targeting information security matters;
7. Collect and summarize security events and data including preparing security reports and eventual remedies to be taken;
8. Administer ICT security tools, maintain security escalation and contact lists and security logs;
9. Offer internal management consultancy advise and practical assistance on information security risk and control matters throughout the organization;
10. Carry out information security awareness, training and educational activities;
11. Undertake such other duties as may be reasonably required and which are consistent with the level of responsibility of this job.

Minimum Academic, Professional Qualifications and Experience

1. Bachelor’s degree in Information Technology, Computer Science or related from a recognized institution;
2. Professional qualifications in CISSM/CISA/ CEH/ Operating System based Certification, Security+;
3. A supervisory Course lasting not less than 2 weeks;
4. Membership to a relevant professional body;
5. Work experience of atleast three (3) years in Information Security Administration, Security compliance or IT security audit;
6. Meets provision of chapter six of the Constitution