Job Details - Postbank Kenya Skip to content My Bank, My Choice, My Future +254 716 918999 info@postbank.co.ke News Tenders Careers Internet Banking Menu Home Services Accounts Savings Accounts M-Chama Account Bidii Savings Account SAYE Account Step Account Akiba Account Akiba Pension Account Waridi Savings Account Smata Account Term Deposit Accounts Premium Plus Account Transfers Ria Money Western Union Money Gram Digital Banking Mobile Banking Internet Banking About Who we Are The Team Blog Resources Service Charter FAQ Branch Locator Data Privacy Statement Terms and Conditions Strategic Plan 2021 to 2025 Gallery Contact Us Assistant Manager Information Security Systems, Job Grade PB 4: KPOSB/ICT/1/26 Position Function The Assistant Manager, Information Technology Security will be responsible for providing leadership and coordination to the IT Security and is responsible for monitoring computer networks and ICT infrastructure against cyber-attacks, security threats or unauthorized access to safeguard the Bank’s data and knowledge base. The job holder’s role is to ensure the integrity, availability, confidentially and authenticity of all information assets of the Bank. Key Responsibilities Review security reports that arise from security incidents and ensure that proper investigations have been carried out and remedial actions put in place. Ensure the Bank complies with local regulations e.g. encryption regulations and privacy laws. Enforce compliance to ICT Security policy of the Bank. Ensure changes made to ICT systems strictly adhere to change management policy of the Bank and do not affect availability of services. Oversee the development, update, communicate and publish the Information Security Policy and other operational security policies. Review the Bank’s ICT security controls and security strategies while ensuring that the procedures for operating and maintaining those controls are in place. Ensure that the Confidentiality, Integrity and Availability of services are maintained at the levels agreed in the Operation Level Agreements (OLAs). Ensure that all access to services by external partners and suppliers is subject to contractual agreements and responsibilities (e.g. non-disclosure agreements) and are closely monitored. Ensure all changes to access are assessed for impact on all security aspects; including information security policy and controls. Oversee the ICT security risk analysis and risk management in coordination with Risk and ICT Service Continuity Management functions. Oversee the Bank’s ICT security awareness program to ensure the technology organisation employees understand the risks / threats to their business, their responsibilities and how to comply with policies. Manage Coordinate the development and testing of the Bank’s Disaster Recovery Plans (DRPs). Oversee the design, development and delivery of enterprise level identity and access management solutions. Ensue that there is a strategy for Identity and Access Management services that are robust and scalable to support the employees, contractors, partners and vendors. Interact with other department to ensure that staff have the correct level of access to systems and applications. Provide security services to and complement the information technology architecture while integrating with the business global architecture. Oversee the analysis, design, building, testing, and deployment activities related to IAM components. Act as trusted security architecture advisor to provide strategic direction in leading activities in support of Identity Lifecycle management tools and technologies and enterprise security objectives. Review solutions and recommendations for issues caused by process challenges, emerging threats and technology changes. Manage and support security infrastructure systems & devices (including Access Control Systems, Patch Management Systems, Web Application Firewalls, Database Security, Authentication Systems etc.). Oversee the develo