Applicants are hereby invited to apply for the position of Manager – Security Operations and Incident Response (Management Grade 1), within our Group Information and Communications Technology Department.

Applications are to be submitted on or before October 05, 2026.

JOB SUMMARY 

The incumbent will be responsible for managing the security operations and incident response activities within the Group and to ensure that day-to-day security operations activities which include security monitoring, threat hunting, vulnerability management and incident detection and responses are managed. He/She will also be responsible for establishing and maintaining a robust security operations function, driving incident response capabilities, and ensuring effective security incident management to safeguard the organization's assets and maintain operational resilience.

KEY DUTIES AND RESPONSIBILITIES

• Develops and manages Security Operations ensuring the continuous operation and integrity of security systems, technologies and controls
• Responsible for the development, implementation and maintenance of the Group's Information Security Incident Management Program
• Develops and manages controls and processes to continuously detect malicious activities and protect critical data and computing infrastructure when responding to incidents
• Develops, maintains and improves Information Security Incident Response Planning and Execution processes
• Ensures the organization's readiness to respond to security incidents through the completion of regular exercises, tests and simulations
• Oversees the execution of the group's vulnerability management framework ensuring the proactive identification and remediation of vulnerabilities
• Ensures the review of vendor security operations and incident response capabilities
• Manage the analysis of security incidents, trends, and emerging threats to identify areas for continuous improvement
• Ensures the management and delivery of technical security training of human resources required for security operations and incident response processes
• Manages human resources necessary for the efficient delivery of security operations and incident response
• Performs all other duties, assignments and special projects as assigned by the Head Enterprise Information Security

QUALIFICATIONS AND EXPERIENCE

• Candidates must possess a Bachelor’s Degree in Information Systems or a related field from a reputable University or other professional qualification and three (3) years progressive experience in the core function, including working on projects calling for the delivery of IT security requirements across the entire technology stack (Network to application) and lifecycle (strategy to Operations) at least one (1) of which must be at a Supervisory Level OR
• Executive Diploma\Diploma in Information Systems or a related field and five (5) years progressive experience in the core function, including working on projects which calls for the delivery of IT security requirements across the entire technology stack (Network to application) and lifecycle (strategy to Operations) and at least two (2) years at a Supervisory Level and OR
• GMDP Certificate and seven (7) years progressive experience in the core function, including working on projects which calls for the delivery of IT security requirements across the entire technology stack (Network to application) and lifecycle (strategy to Operations) and at least three (3) years at a Supervisory Level
• The ideal candidate must possess CISM, CISSP or equivalent security certifications
• The ideal candidate must possess strong marketing skills, working knowledge and good understanding of the economic and general business environment and the banking and financial services industry
• Candidates must have the ability to effectively communicate with customers with a high level of professionalism and professional deportment and to analyze technical security practices and documents and how the process can be improved
• Strong problem solving, evaluation and analytical skills
• Knowledge of relevant legal and regulatory requirements are also required