Vacancies at Equity Bank Kenya

Job Purpose: 

The Lead, Security technology specialist provides a demonstrated holistic mastery and in-depth understanding of existing and emerging system, infrastructure and network security technologies in a complex environment and provides guidance on information security processes, controls, and compliance, and information security risk management.

Job Responsibilities/ Accountabilities: 

• Measure the effectiveness of the Advanced Cyber Security & Emerging technologies / controls capabilities to ensure appropriate plans are in place to address lower performance and ineffective practices 
• Evaluates, defines and provides recommendations addressing computer security architecture and infrastructure to address new requirements, emerging advanced network technologies, and changes to communications and IT operations and business processes 
• Manages all aspects of communications security and the development, implementation, interpretation, accreditation, risk management and maintenance of detailed communications security policies, plans, programs, standards and criteria ensuring a successful communications security program 
• Analyse business requirements and security solutions to deliver business appropriate levels of protection 
• Responsible for application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management, Infrastructure and Networks and Auditing, Logging and Compliance) 
• Provide reporting on control status to management 
• Update product standards as needed 
• Proven ability to follow global established standards in digital evidence acquisition and handling, experience with conducting digital investigations and incident responses and experience in managing insider threats and cyber and data exfiltration incidences 
• Support the delivery of the 3 year Cyber security roadmap to maintain and optimize the Advanced Cyber Security & Emerging technologies / controls capability 
• Lead the enhancement and optimization of implemented reporting mechanisms to demonstrate the value of the Advanced Cyber Security & Emerging technologies / controls function with tangible benefits 
• Identifies technical and business opportunities to take advantage of cross project knowledge, best practices and reusability to expedite projects 
• Manage the security posture of IT infrastructure for overseas locations 
• Provide deployment services on enabling new infrastructure capability 
• Follow information security policies, methods, standards, National Institutes of Standard and Technology (NIST) standards and practices to organizational information systems, IT reference materials and interpret regulations 
• Implement security controls, perform ongoing maintenance and prevent, detect, analyze and respond to security incidents 
• Communicate with Information Security Officer, and other IT personnel within the organization and organizational staff 
• Help coordinate the implementation of security programs across all agency platforms 
• Assist with Active Directory access and Group Policies, Internet intrusion detection, Internet filtering, and monitoring of employee access, virtual private networking (LAN/WAN) security 
• Assist and participate with the Senior IT Specialist as an advisor in projects to enhance or develop new IT systems, or to study the feasibility of acquiring new technology 

Strategy: 

• Understand information security trends 
• Document and communicate security solution roadmap to the GM, Enterprise Security Architecture team

Qualifications

Knowledge and Experience:

• A Degree or its equivalent in Information Technology, Network Security, Enterprise Network Management, Information Security, Management Information System Computing, Engineering or similar area of study 
• Relevant industry certifications in information security program and governance as well as PMP will be an added advantage 
• Minimum of Eight (3) years of computer information technology experience. 
• Minimum of Four (7) years of experience engineering and designing IT security solutions 
• Good understanding all the information security domains 
• Experience of identifying and managing technology security risk 
• Certification like CISSP, CCSP, CISA, CCISO, SABSA, ISO27001, ISO27301 will be of advantage 

Key Critical Competencies:

• Ability to know when to implement solutions with consideration to the wider impacts i.e. risk, cost, customer impact, timescales, etc. 
• Excellent negotiation, and written and verbal presentation skills 
• Ability to handle high pressure situations with key stakeholders 
• Good Analytical skills, Problem solving and Interpersonal skills 
• Deep knowledge of enterprise application development security controls  
• Good knowledge of Telco convergence business, FinTech network traffic consumption and OpenAPI

go to method of application »

Job Purpose:  

• The Application Security Analyst provides expertise to inform and validate the secure design and development of IT applications including changes to existing applications.

Job Responsibilities:

• Ensure that application security is an embedded and critical part of the software delivery lifecycle (including during the early stages of projects) regardless of delivery methodology and tool sets used (e.g. static code analysis)
• Train and educate developers and teams in secure coding techniques including use of supporting toolsets and enable them to self-service.
• Perform application vulnerability assessments including regular scanning and penetration testing activities in terms of post deployment security testing on Web based, Mobile, Cloud application, Robotics, IOT etc
• Perform secure code review across a variety of programming languages
• Help tune Web Application Firewalls (WAF) and modify WAF policy to virtually patch applications where required.
• Develop functional security testing scripts and procedures and identify opportunities to automate security testing and processes
• Identify inherent vulnerabilities and information security risks within systems and applications

Qualifications

Education:

• A bachelor’s degree in IT/ Computer Science/ Telecommunications/ Engineering (Electrical or  Electronic) or related field from a recognized university.
• Must possess at least one professional certification such as CEH (Certified Ethical Hacker), LPT (Licensed Penetration Tester Master), OSCP (Offensive Security Certified Professional), CompTIA PenTest+, CMWAPT (Certified Mobile & Web Application Penetration Tester).

Knowledge and Experience

• A minimum of 5 years’ supervisory experience in Information Technology; with at least:
• 3 years’ experience in Information Security.
• Preferably 2 years Banking Experience in Active Application Security Testing
• Good knowledge of Banking/ Financial Services Operations
• Excellent planning and organizing skills
• Excellent problem analysis and attention to detail.

Competency:

• Web Application, Mobile, Cloud Application, Robotic Automation testing, IOT