Vacancies at Co-operative Bank of Kenya

The Role

Specifically, the successful jobholder will be required to:

• Manage and maintain ICT security solutions, including Web Application Firewalls, anti-malware, Data Loss Prevention (DLP), endpoint encryption, Privileged Access Management (PAM) and Multi-Factor Authentication (MFA).
• Coordinate the review and resolution of vulnerability assessment findings, recommend appropriate security enhancements and ensure security assessments are completed for new products, innovations, infrastructure upgrades and other ICT initiatives.
• Analyse system and application logs to identify indicators of compromise, suspicious user activities and security anomalies. Enforce security policies, configuration baselines and least-privilege access controls across business applications and infrastructure.
• Support the identification, logging, investigation and resolution of security incidents. Coordinate root cause analysis, monitor system availability and ensure appropriate corrective and preventive measures are implemented.
• Research, implement and maintain security tool integrations to enhance threat visibility, improve detection capabilities and reduce incident response times.
• Develop security dashboards, reports and metrics; monitor privileged user activities across servers, systems and databases; and engage ICT teams to communicate security risks, policy gaps and recommended improvements.
• Translate information security risks into practical business implications and provide security guidance to ICT teams and project stakeholders to support secure, reliable and compliant technology operations.

Skills, Competencies and Experience

The successful candidate will be required to have the following skills and competencies:

• A bachelor’s degree in Information Technology, Computer Science or a related IT discipline. A business-related degree will also be considered where supported by relevant IT security qualifications.
• Relevant professional certifications such as CCNA, CISA, CISSP, CCIE Security, CEH, DevSecOps, CRTP, CRTE or other recognised cybersecurity certifications.
• Good knowledge of enterprise cybersecurity, ICT risk management and information security controls.
• Practical experience or working knowledge of vulnerability assessments, security assessments, penetration testing methodologies and associated tools.
• Understanding of common cybersecurity threats, threat intelligence sources and emerging security risks.
• Good knowledge of ICT infrastructure, network architecture, operating systems and infrastructure components.
• Familiarity with software development environments, application security (iOS & Android) and database technologies.
• Practical experience conducting security architecture reviews and providing security assurance for new systems, technology projects and significant changes to existing platforms.
• Strong analytical, communication, reporting and stakeholder management skills.

go to method of application »

The Role

Specifically, the successful jobholder will be required to:

• Monitor the Bank’s networks and systems on a 24-hour basis using Security Information and Event Management (SIEM) tools to detect, analyse and investigate potential security threats.
• Conduct proactive threat research, monitor open-source intelligence sources and identify emerging cyber threats that could affect the Bank. Recommend, implement and support appropriate defensive measures.
• Triage security alerts, investigate suspicious activities, analyse security logs and support the containment, eradication and resolution of cyber incidents in collaboration with relevant ICT teams.
• Analyse network and host-based security logs, including firewall, intrusion detection and system logs, to determine the appropriate corrective actions, mitigation measures and escalation pathways.
• Maintain accurate records of security investigations, document incident response activities, track resolution actions and provide timely status updates and periodic reports to management.
• Support the development and maintenance of Security Operations Centre (SOC) procedures, monitoring use cases, incident response processes and security documentation to enhance detection and response capabilities.
• Work closely with ICT Security, ICT Risk and Control, Security Services and other technical teams to investigate incidents, address vulnerabilities and ensure timely resolution of security risks.
• Keep abreast of emerging cybersecurity threats, technologies and industry best practices through relevant training, research and professional development.

Skills, Competencies and Experience

The successful candidate will be required to have the following skills and competencies:

• A bachelor’s degree in Information Technology, Computer Science or a related field.
• At least one year of experience as a Security Administrator, Network Administrator or in a related technical role, or equivalent knowledge.
• Professional certification in CEH or CySA+ is mandatory. Additional certifications such as CISSP, CISA, CCNA or other recognised cybersecurity certifications are desirable and will be considered an added advantage.
• Technical knowledge of SIEM & SOAR solutions, network, database and operating system security.
• A good understanding of security methodologies, processes and technologies, including firewalls and intrusion detection systems.
• Knowledge of TCP/IP protocols, network analysis, common internet protocols and network security applications.
• Experience in information security, security engineering or analytical roles within complex business environments.
• Knowledge of SQL will be an added advantage.