Job Openings at Jubilee Insurance

Job Ref. No: JLIL127

Role Purpose

The job holder will be primarily responsible for recommending, enforcing, and monitoring technology related security procedures to secure the company’s Technology and Information Systems

Main Responsibilities

• Review, development and implementation of IT Security policies and procedures.
• Review, monitor and maintain security systems in accordance with corporate policies.
• Implementing security standards and best practices for the organization and recommending security enhancements to management as needed.
• Vulnerability Management. Conducting periodic scans of networks to determine existence of any vulnerabilities and making sure remediation has been done.
• Investigate security violations/breaches and report such violations as necessary plus provide remediation actions.
• Forming part of the incident response team that investigates security breaches and investigate security violations/breaches and report such violations as necessary plus provide remediation actions.
• Design, implement, manage, monitor, and troubleshoot network security defense and monitoring tools, including configuration management, firewalls, IDS/IPS, and monitoring systems and tools.
• Enhance security awareness by providing orientation, educational programs, and on-going communications.
• Participate in all technical projects, integrations, enhancements and enforce security best practice requirements in line with information security policies and standards.
• Enforce compliance of IT regulations and IT Cybersecurity policies by developing a monthly scorecard for each department based on how well they are performing in terms of Cyber Security compliance.
• Manage Jubilee’s Firewall and ensure continuous review of rules and policies created to protect the company’s information systems from external threats.
• Generate ad hoc/weekly/monthly Information Security reports.
• Manage internal and external IS audit requests and enforce recommendations.
• Provide security requirements for all technical projects in line with information security policies and standard requirements.
• Develop a secure network architecture design and conduct network security reviews.

Functional Skills

• Experience in implementation of ISO 27000 & COBIT.
• Knowledge of security policy standard development, secure infrastructure design & reviews.
• Working knowledge and experience with virtualization, remote access, and secure mobile technologies.
• Leadership and communication.
• Business continuity Planning (BCP) and Data Recovery (DR) planning and management.
• Endpoint Management (EDR, Antivirus and Encryption).
• Cyber Security Risk identification, categorization, and management.

Qualifications

• Bachelor of Science Degree in Computer Science or other Computer related field from a recognized University
• Information Security Qualification: CCSP/CISSP/CISM/CISA/CEH
• Networking Competencies: MCSE, CCNA/CCNP

Relevant Experience

• 5 years working experience in information and network security support in a large or medium sized organization.

go to method of application »

Job Ref. No: JLIL126

Role Purpose

The job holder will be primarily responsible for front-line cybersecurity defense focusing on monitoring, detection & responding to cyber security incidents in real time.

Main Responsibilities

• Monitor user, system, and network activity to identify suspicious activities and investigate anomalous events and traffic trends.
• Conduct periodic security reviews and vulnerability assessments across all of Company’s systems/infrastructure and initiate remedies on noted gaps.
• Ensure all new and existing systems/products/services comply with Company's security policies & standards and other industry best practices.
• Administer security monitoring tools ensuring optimal uptime and resource utilization.
• Use the security monitoring tools to monitor alerts and alarms and initiate corrective actions.
• Configure and finetune security monitoring systems to make sure Jubilee Insurance is sufficiently protected.
• Mitigate intrusion attempts through proactive response to incidents.
• Do regular follow ups with system custodians/owners to ensure any security risks identified are addressed within the agreed timelines.
• Provide timely and quality security assurance reports and advice to the business when required.
• Define Cyber Security metrics and report periodically on security compliance across all networks/systems.
• Research on new cyber security threats, technologies, vulnerabilities, security design principles.
• Develop a monthly scorecard for each department on how well they are performing in terms of Cyber Security compliance.

Functional Skills

• Knowledge of security policy standard development, secure infrastructure design & reviews
• Working knowledge and experience with virtualization, remote access, and secure mobile technologies.
• Business continuity Planning (BCP) and Data Recovery (DR) planning and management.
• Vulnerability, Access control and privileged access management (PAM).

Qualifications

• Bachelor of Science Degree in Computer Science or other Computer related field from a recognized University
• Information Security Qualification: Certified SOC Analyst/ Certified Incident Handler/ CISSP/ Security +/CISA/CISM
• Networking Competencies: MCSE, CCNA/CCNP

Relevant Experience

• 3 years of working experience in Cybersecurity in a large or medium sized organization