ICT Risk Analyst Full Time

CIC Insurance Group Limited, commonly referred to as CIC Group, is an insurance and investment group that operates mainly in Kenya, Uganda, South Sudan and Malawi

Purpose:

The ICT Risk Analyst will play a crucial role in safeguarding our digital assets, ensuring regulatory compliance, and enhancing our overall security strategy. You will leverage your expertise in risk assessment, threat analysis, and security technologies to protect our organization in an ever-evolving threat landscape

Primary Responsibilities:

Risk Management & Assessment

• Spearhead quarterly risk assessments across IT infrastructure
• Identify vulnerabilities and develop mitigation strategies
• Maintain and optimize our ICT risk control register

Security Monitoring & Incident Response

• Lead proactive network monitoring using advanced tools
• Investigate and respond to security alerts with urgency
• Contribute to our incident response planning and execution

Threat Intelligence & Analysis

• Conduct in-depth analysis of emerging cyber threats
• Translate complex threat data into actionable insights
• Collaborate with IT teams to implement preventative measures

Compliance & Policy Development

• Ensure adherence to regulatory requirements
• Contribute to the evolution of our security policies
• Conduct regular ICT compliance attestations and reporting

Reporting & Stakeholder Management

• Deliver compelling risk assessment presentations to leadership
• Develop and nurture relationships with key stakeholders
• Drive security awareness initiatives across the organization

Academic and Professional Requirements

• Education Bachelor’s Degree Degree in Cybersecurity, IT, or related field
• Professional Qualification CISSP, CISA, or CRISC required; CEH or OSCP is desirable

Experience Required:

• At least 3 years of relevant experience in a similar role.
• Excellent communication and presentation skills
• Problem-solving skills
• Excellent interpersonal skills
• Good analytical skills