The Position: 

The position is responsible for assuring oversight on IT related risks as related to projects, information security, business continuity and disaster recovery, risk management policies and standards of KCB Group. 

Key Responsibilities:

• Carry out reviews along the various phases of a project’s lifecycle as detailed in the bank’s Project Management framework to ensure that all delivered systems comply.
• Provide guidance in resolving IS audit findings and lead the development of reports and corrective action plans.
• Provide guidance for the Resumption and Recovery of time sensitive business operations in accordance with pre-established timeframes as well as ensuring that adequate plans are in place for the less time sensitive business operations.
• Develop and implement Risk Management Policies, procedure, standards, and guidelines based on best practice benchmarking COBIT, ISO/IEC 270001, NIST, ITIL and other relevant standards.
• Review and recommend appropriate security enhancement of our network by evaluating network design and ensure implementation of effective firewall security policies.
• Manage incidents and complaints about ICT Services.
• In liaison with IT ensure effective change management process is in place.
• Review and evaluate system backup and disaster recovery standards for the bank, follow up on the implementation and provide support to ICT Department to ensure quick recovery in the event of disaster.
• Reviewing the Business Continuity Programme for effectiveness and completeness and recommend appropriate action.
• Reviewing System Security Configurations for effectiveness and recommend appropriate settings.

The Person:

For the above position, the successful applicant should have the following:

• Bachelor’s degree in Computer Science or related field.
• A professional certification in CISSP, CISA, CISM or CRISC.
• At least 6 years’ experience in either Technology Risk, Technology Security / Cybersecurity Technology Audit, or Technology Forensics