IT Security & Risk Manager

Location: Burundi

• Implementation and administration of KCB Bank Burundi endpoint security solutions such as endpoint detection and response tools, full disk encryption tools and processes in line with the Group’s endpoint protection policies.

•  

• Developing and enforcing cybersecurity policies, standards, and procedures to ensure proper operations and maintenance of Technology assets.

• Ensuring the properties of security, authenticity, accountability, non-repudiation and Reliability of information and information processing systems are preserved.

• Promoting user awareness of good cybersecurity practices, current threats, and the bank’s cybersecurity policies & procedures among all KCB Bank Burundi’s employees, vendors, and customers. 

• Lead projects related to security enhancements, compliance, and risk mitigation, ensuring they are delivered on time, within scope, and budget. 

• Identifying and assessing ICT risks in conjunction with other units in Technology department, Control functions (Risk, Compliance, Audit, & Forensic) and Lines of Business, to determine their materiality. 

• Manage disaster recovery and business continuity plans to ensure minimal disruption in the event of a security incident.

• Developing tactical and strategic plan of action, with distinct delivery timelines to address material risks and any open internal or external audit items or regulatory issues and tracking these actions to completion. 

• Providing guidance within Technology Department, in collaboration with other control functions in the bank, on topics related to ICT risk management such as achieving compliance with internal policies, regulatory requirements, and international standards in order to remain within the risk appetite of KCB Bank Burundi.

• Implementing technical controls in support of the Bank’s Data Privacy programs, on premises and on cloud, in line with General Data Protection Regulation (GDPR) and National Cyber Security guidelines.

 

The Person 

 

 For the above position, the successful applicant should have:

 

• Bachelor’s Degree B.Sc. Information Technology / Computer Science / Telecommunications /Engineering or related field

A minimum of 3 years of essential professional experience is required in Information Security Management; Governance, Risk Management and Compliance Security Architecture and Engineering; Security Program Management and Operations, Communication and Network Security; Identity and Access Management, Software Development, Security Assessment and Testing, Information Security Incident Management, IT or Information Security

Possession of a Master degree is added advantage

• Candidates must possess the requisite professional qualifications essential for this role.: Certified Forcepoint Web Security System Engineer, Certified Forcepoint Web Security Administrator, Checkpoint Certified Maestro Expert

 

• Candidates must hold at least one recognized professional qualification within the relevant domain of CCNA Security: Cisco Certified Network Associate, CISSP: Certified Information Systems Security Professional; CISA: Certified Information Systems Auditor; CISM: Certified Information Systems Manager 

 

The IT Security and Risk Manager’s primarily role is to oversee the protection of the entire portfolio of KCB Bank Burundi technology systems, applications, databases, infrastructure (servers, storage, network, Voice, Data, Cloud technology etc.), and assets from malicious actors. The role serves as the process owner of all assurance activities related to the availability, integrity and confidentiality of customer, business partner, employee, and business information in compliance with the Bank's information security policies. Other key purposes of this role include: • Collaborate with other stakeholders (Business leaders, Risk and Technology leaders) to determine acceptable levels of risk for the Bank. • Serving as the Bank’s expert on cybersecurity protection, detection, response, and recovery • Preserve the confidentiality, integrity, availability, authenticity, accountability, non-repudiation, and reliability of KCB Bank Burundi’s technology infrastructure and data against aggres