Cybersecurity Specialist, Identity & Access Management at KCB Bank Kenya
KCB Bank Kenya
KEY RESPONSIBILITIES
Lead the Bank's development of IAM strategy, architecture and Zero Trust Principles for Identity and acess for all users (internal, external and customers)
Architect and oversee implementation of MFA, SSO, federation, and password less authentication across the Group.
Design and support implementation of solutions for the Bank's privileged access management program in line with the Bank's privileged access management policies and ensure the principle of least privilege.
Collaborate with business, compliance, and audit stakeholders to align IAM practices with regulatory and operational requirements. Design and enforce RBAC/ABAC models, ensuring segregation of duties, least-privilege enforcement and secure privilege access management.in projects from inception through to successful implementationin a bid to ensure compliance to set identity/privileged access management standards
Assess the sufficiency of policies, standards and procedures relative to identity and privileged access management best practices.
Define and maintain identity lifecycle management processes covering joiner, mover, and leaver scenarios, with automated provisioning and de-provisioning. Provide input into technology security risk control self-assessments by leveraging specialized knowledge in identity/privileged access management.
Conduct research and development on new areas in identity/privileged access management and perform knowledge sharing with Technology team across the group.
Lead training and awareness programs to improve identity hygiene across staff and vendors.
DAILY RESPONSIBILITIES
Lead the development of IAM strategy and architecture.
Align IAM initiatives with business and compliance goals.
Design scalable, secure, and user-friendly IAM systems.
Collaborate across departments to ensure integration and adoption.
Monitor IAM maturity and drive continuous improvement.
MINIMUM POSITION QUALIFICATION REQUIREMENTS
Academic & Professional
Education Bachelors Degree BSc. IT or equivalent RQ
Professional Qualifications
At least one: CISA or CISM or CISSP
Security+, CCSP, IAM certification from Microsoft, Oracle, Okta, Azure, AWS or Google RQ AA
Masters Degree MBA/MSc AA
Experience
Total Minimum No of Years' Experience Required 5
Detail Minimum No of Years Need Type[5]
Experience in Information Security 3 ES
Experience in Identity and Access Management 2 ES
Experience in Banking Operations 1 DE
Experience in Project Implementation and user training 1 DE
Experience in large busy technology environment 3 ES