KEY RESPONSIBILITIES: 

• Design, implement, and maintain a comprehensive vulnerability management framework covering on-prem, cloud, and containerized environments as necessary for the protection of KCB Group information assets
• Administer and optimize vulnerability management tools, including those for external attack surface monitoring and cloud security posture management.
• Serve as SME for vulnerability assessments across traditional infrastructure, cloud platforms and container ecosystems
• Manage vulnerability lifecycle, including prioritization, remediation tracking, and reporting for internal and external assets
• Integrate vulnerability management processes with SIEM/SOAR and other Security platforms for automated alerting and response
• Conduct research on emerging threats, zero-day vulnerabilities, and security best practices
• Provide technical guidance to system owners on secure configurations and remediation strategies.
• Ensure compliance with regulatory requirements and industry standards pertaining to Vulnerability Management
• Develop and maintain vulnerability scoring and risk prioritization models for enterprise-wide reporting.
• Act as Vulnerability Management SME in projects, providing advisory and validation of security controls throughout the lifecycle as needed

MINIMUM POSITION QUALIFICATION REQUIREMENTS

Academic & Professional 

• Education     Bachelor’s Degree    B.Sc. Information Technology / Computer Science / Cybersecurity / Engineering (Electrical, Electronic) or related field    RQ 
• Professional Qualifications    Cybersecurity certification in either CISA/ CISM/ CISSP/ Security+/CEH    AT least one or an equivalent RQ 
• Penetration Testing / Cybersecurity Assurance Certification in either OSCP/ CPT/ LPT/ PenTest+/ ECSA/ CHFI/CCNA CyberOps any Cloud Security (AWS/Azure/GCP) certificates / Container Security (Kubernetes/Docker)    AA   
• Master’s Degree    MBA / MSc     AA  

Experience

 Total Minimum No of Years of Experience 5 years

Required in a Supervisory role

Detail    Minimum No of Years    Need Type[1]

• Experience in Cybersecurity    2    ES
• Experience in Vulnerability Management     1    RQ
• Security Testing / Penetration Testing    1    AA
• Experience in System/ Network/ Database or Cloud Platform Administration    2    ES