Assistant Manager, Information Security

DIB Bank Kenya Limited is a financial institution established in 2017, operating in Kenya and offering a range of banking and financial services.

The Assistant Manager, Information Security, is responsible for protecting the bank's financial assets, customer data, and IT infrastructure from cyber threats, ensuring compliance with regulatory standards. The role requires understanding relevant regulations and security standards, assessing and measuring the organization's and third-party vendors' security posture, and coordinating remediation and mitigation of identified security gaps.

1. Collect and validate data for monthly security posture measurements and prepare draft security dashboards for review.
2. Maintain the security gap register, including owner, severity, target date, and status.
3. Follow up on open security gaps with control owners and report overdue items.
4. Review remediation evidence against agreed standards and recommend closure or retention.
5. Conduct information security risk assessments on new systems, changes, and projects, preparing draft risk opinions.
6. Monitor managed SOC provider reports against service levels and track SOC findings to closure.
7. Review access recertification results, privileged access reports, and joiner, mover, and leaver exceptions, logging findings.
8. Review security configurations of new and changed systems against Group standards and approved baselines.
9. Complete security assessments of third-party vendors using approved questionnaires and evidence requirements.
10. Track findings from independent security testing and confirm retesting before recommending closure.
11. Maintain the risk acceptance log, recording rationale, approver, and expiry date, and flag acceptances nearing expiry.
12. Gather evidence and draft responses for internal, external, and regulatory audit requests.
13. Run security awareness activities, including phishing simulations, and report on participation and results.
14. Support the Senior Manager in overseeing security incident response, post-incident reviews, and tracking lessons learned.
15. Stay current with emerging threats and regulatory changes, briefing the Senior Manager on their impact.
16. Ensure all assigned tasks and projects adhere to departmental policies, procedures, and SLAs.
17. Act as a stand-in for the Senior Manager Information Security for day-to-day matters during their absence.

1. Bachelor’s degree in Information Technology, Computer Science, Information Security, or a related field from a recognized university.
2. Certification in Information Security.
3. Minimum of 4 years of experience in Cybersecurity and/or Information Security Governance.
4. Knowledge of Information Security architecture.
5. Understanding of IT technology platforms across various IT domains.
6. Familiarity with information security management and relevant standards or benchmarks.
7. Effective application of all relevant banking policies, processes, procedures, and guidelines.