Vacancies at KCB Bank Kenya

About KCB Bank Kenya
Kenya Commercial Bank Limited is a non-operating holding company that started operations as a licensed banking institution effective January 1, 2016. The holding company holds KCB Kenya that was incorporated on the same day and also regional units of KCB in Uganda, Tanzania, Rwanda, Burundi, Ethiopia, and South Sudan. It also owns KCB Insurance Agency, KCB Capital, KCB Foundation, and other subsidiaries. The establishment of the holding company is expected to better position the Group to access unrestricted capital, invest in non-banking ventures, grant its subsidiaries operational and strategic independence, and enhance its corporate governance and oversight.

Information Risk Analyst
Job Type Remote Job
Qualification BA/BSc/HND , Diploma
Experience 5 years
Location Kisumu,Kenya
Job Field ICT / Computer

Key Responsibilities

• Conduct periodic IT risk assessment to ensure all risks have been identified have been, brought to the attention of management and appropriate control measures implemented to mitigate risk;
• Provide information risk consultation and guidance during system, application development and e-product development to assure that security concerns are fully addressed in the process;
• Conduct operating systems, application security including web application and database security risk assessment      and report findings to management;
• Conduct logical and physical access control risk assessment to ensure systems security is not compromised;
• Be involved in periodic penetration testing to uncover any loopholes in the bank’s network;
• Review and accredit newly developed systems before deployment in live environment;
• Coordinate self-assessments, gap assessments, risk acceptance and other control related efforts with the business, controls and compliance functions;
• Liaise with Risk Heads in subsidiaries with a view of ensuring that Group standards are met;
• Proactively anticipate potential threats and vulnerabilities and provide guidance in coordination with IT department on effective responses or control measures within subsidiaries;

The Person

For the above position, the successful applicant should have the following: 

• BSc (Computer Science) or related field
• Professional qualification/Certification in CISSP, CISA, CISM, CRISC.  
• Master’s degree is an added advantage. 
• 4 years’ work experience in the same or related role, with at least: –
• 4 years’ experience in Information Technology (any domain). 
• 2 years’ experience in Information Risk Management
• 2 years’ experience in Systems Audit. 
• 1-year experience in Forensics is desired 
• 2 years’ experience in Information Security
• 2 years’ experience in Change and Project Management. 

Job Type: Contract
Compensation: 380,000 KES monthly. The pay will be per task completed; hence, actual earnings will vary based on the performance of staff at KCB. The amount listed is an estimate of the expected deliverables and workload for each task and responsibility within the role.
Language: English