Cyber Security Governance, Risk & Control

Reverside is an established IT services provider focused on delivering high-quality Software Development, IT Resourcing, Digital Transformation, and Systems Support solutions. We are seeking a highly motivated Cyber Security Governance, Risk & Control professional to join our growing team and contribute to innovative technology projects across various industries.

Key Responsibilities

• Continually review and update security policies, standards, and guidelines in response to evolving cyber threats, in coordination with the Enterprise Risk Management team.
• Monitor and drive compliance with internal and global cyber security policies and standards, Vodafone Cyber Security Baseline controls, and applicable Kenyan laws and regulations.
• Coordinate stakeholders to deliver on targets and agreed business outcomes.
• Coordinate periodic independent assurance reviews of critical products and services.
• Ensure implementation of recommendations from independent security assessments.
• Conduct cyber risk assessments to determine risk exposure and define appropriate treatment plans.
• Recommend cyber security service improvement initiatives.
• Coordinate project handover processes within cyber security functions.
• Continuously review and improve user access governance processes.
• Coordinate cyber security awareness initiatives, including training sessions, knowledge sharing, and phishing simulations in line with strategy.
• Support implementation of the Managed Security Services strategy and roadmap.
• Participate in cyber security events, conferences, and trade shows, including reporting and presentations.
• Prepare communications, reporting, and presentations for stakeholders.