Careers at DIB Bank Kenya

Assistant Manager,
Information Security

Join a progressive Islamic bank that embraces innovation and values creativity.

Experience: Minimum 4 years
Apply by: 30 October 2026

About DIB Bank Kenya

DIB Bank Kenya Limited is a fully owned subsidiary of Dubai Islamic Bank PJSC (AE). The Bank offers a comprehensive range of Islamic financial products and services with several attractive features based on a system of ethical banking principles for the benefit of all, irrespective of religion, creed, belief, or nationality.

As a progressive Islamic Bank that embraces innovation and values creativity, we are seeking to recruit an agile and experienced professional for the position of Assistant Manager, Information Security.

Job Purpose

To protect financial assets, customer data, and IT infrastructure against cyber threats while ensuring compliance with regulatory standards.

Key Responsibilities

Collect and validate data for the monthly security posture measurement cycle and prepare draft security dashboards for the Senior Manager’s review.
Maintain the security gap register, recording each gap’s owner, severity, target date, and status.
Follow up on open security gaps with control owners and report overdue items to the Senior Manager.
Check remediation evidence submitted by control owners against the agreed standard and recommend closure or retention to the Senior Manager.
Carry out Information Security risk assessments on new systems, changes and projects as assigned and prepare draft risk opinions.
Monitor the managed SOC provider’s reports against agreed service levels and track SOC findings to close.
Review access recertification results, privileged access reports and joiner, mover and leaver exceptions produced by I.T and log findings.
Review the security configuration of new and changed systems against Group standards and approved baselines, as assigned.
Complete security assessments of third-party vendors using the approved questionnaire and evidence requirements.
Track findings from independent security testing and confirm retesting before recommending closure.
Maintain the risk acceptance log, recording rationale, approver and expiry date, and flag acceptances near expiry.
Gather evidence and draft responses for internal audit, external audit and regulatory requests.
Run security awareness activities, including phishing simulations, and report on participation and results.
Support the Senior Manager in overseeing security incident response and post-incident reviews, and track lessons learned to completion.
Keep current with emerging threats and regulatory changes and brief the Senior Manager on their impact.
Ensure all assigned tasks and projects are executed within the approved policies, procedures and SLAs of the department.
Stand in for the Senior Manager Information Security on day-to-day matters in their absence.

Dimensions

Design and maintain regular security processes to measure and improve the security posture of the Bank.

Job Complexity

Ability to understand the related regulations and the security standards.
Ability to assess and measure the security posture of the organization and/or third-party vendors.
Ability to coordinate and plan for the remediation and mitigation of the identified security gaps.

Job Specification

Education

Bachelor’s degree in Information Technology, Computer Science, Information Security or a related field from a recognized University.
Certification in Information Security.

Training / Skills

Information Security architecture.
IT technology platforms across the IT domains.
Information security management and standards or benchmarks.
Effective application of all relevant banking policies, processes, procedures and guidelines.