Back to Jobs

Cyber Security Specialist

Absa Group
Nairobi, KE Posted 5 months ago

Job Description

CYBER SECURITY SPECIALIST at ABSA GROUP About the Role Absa Group, a banking institution with over 100 years of heritage and strong regional presence, is seeking a Cyber Security Specialist to protect the organization's digital infrastructure and information assets. In this position, you will serve as a key advisor in developing and implementing comprehensive IT security processes that enable secure management and control of IT access while maintaining full alignment with governance requirements and regulatory standards. What You Will Do Your primary focus will be driving IT risk compliance and ensuring effective management of the bank's data, processes, risks and controls. You will be responsible for assessing cybersecurity risks and exposures, monitoring emerging threats and regulatory changes, and collaborating with stakeholders to design and implement appropriate security controls. A significant portion of your work (60%) will involve maintaining cyber risk registers, identifying and assessing key security risks, and ensuring timely remediation of vulnerabilities. You will run the vulnerability management program, engage with stakeholders to drive resolution of identified issues, and coordinate penetration tests and audit engagements with both internal and external teams. You will also prepare comprehensive cyber security posture reports for risk committees, respond to security incidents in coordination with the Group Incident Response team, and handle regulatory reporting of cyber incidents as required. Additionally, you will measure cyber risk exposure through established parameters (20%), coordinate bank-wide cybersecurity awareness initiatives including board member training and customer communications (10%), and research emerging cybercrime trends and conduct red team exercises (10%). What We Are Looking For You hold a Bachelor's degree in Computer Science or Information Technology and possess professional certification such as CISSP, CISM, or CEH or equivalent. You bring at least 5 years of technical experience in cybersecurity fields. Your technical skills include proficiency with Linux and Windows operating systems, network monitoring, vulnerability assessment and penetration testing, and risk assessment methodologies. You understand IT security service delivery processes and can manage both technical and strategic aspects of cybersecurity programs.