Cybersecurity Architect, Infrastructure & Technical Security

KCB Bank are hiring for the position of Cybersecurity Architect, Infrastructure & Technical Security. This role will be responsible for planning, designing, and testing the bank’s technology security solutions and capabilities. The Architect will also help design, build, implement and support enterprise-class security systems, ensuring they are fit-for-purpose and well-aligned with the overall technology strategy. The Architect will be the security chapter lead within Tribes in the Digital Center of Excellence, providing insights on security controls and identifying appropriate technologies to achieve them while meeting the bank’s Security Policies, Minimum Security Baselines, security standards, and best practices.

Key Responsibilities:

• – Security Chapter Lead: Leading security teams (application security specialists and DevSecOps analysts) in technology-driven tribes as per the Digital Centre of Excellence (DCoE) organization.
• – Security Design: Identify, design, and support the implementation of advanced security systems that meet enterprise-class standards.
• – Security Reference Architecture Design: Develop security architecture elements and reference architectures to effectively mitigate emerging threats.
• – Architecture Review and Enhancement: Evaluate existing and proposed architectures for security gaps and recommend enhancements.
• – Policy Development and Enforcement: Define and enforce the bank’s security policies and standards, providing guidance as a cybersecurity architecture Subject Matter Expert.
• – Research and Development: Research and monitor cybersecurity trends, identify emerging cybersecurity use cases, and drive adoption opportunities.
• – Threat Modeling: Perform threat modeling to identify, quantify, and address security risks within the IT environment across the group.
• – Technology Integration: Ensure seamless integration of new security solutions into the existing technology environment and vice-versa.
• – Stakeholder Engagement: Work closely with technology and business stakeholders in designated projects and initiatives as the security subject matter expert.
• – Reporting: Provide regular updates to IT leadership and stakeholders on the current state of security architecture across the group and the journey towards achieving the desired security architecture and posture.

Requirements:

• – Bachelor’s degree in Information Technology / Computer Science / Telecommunications / Engineering (Electrical, Electronic) or a related field (Master’s degree is an added advantage).
• – At least one professional certification in Information Security, such as CISA, CISM, CISSP, Security+, GSE, GSEC, CRISC, or SSCP.
• – At least one professional certification in Information Security Testing and DevSecOps, such as CDP, CSSLP, CEH, OSCP, CPT, GPEN, GWAPT, eJPT, eWAPT, or eMAPT.
• – Certification in System/Network administration, Enterprise Security Architecture, Information Security Management, or Information Security Standards (e.g., SABSA, ISC2 ISSAP, ISC2 ISSEP, SANS GDSA, ISO27001) is an added advantage.
• – At least 3 years of work experience in Cybersecurity.
• – At least 3 years of experience in Operating Systems (Windows, UNIX, and Linux), Network, Database, or Cloud Platform Administration is essential.
• – At least 2 years of experience in security systems administration, engineering, design, or deployment.
• – At least 2 years of work experience in Software Development and Software Test Automation is an added advantage.