Principal Engineer Cybersecurity Assurance
AI job insight
NCBA is seeking a Principal Engineer to lead cybersecurity assurance activities across production systems in Kenya. The role covers GITC auditing, vulnerability identification, RCSA documentation, security reporting, remediation support, penetration testing, and process improvement.
- Conduct GITC audits and identify security and configuration vulnerabilities
- Maintain RCSA findings, action plans, and compliance documentation
- Partner with IT, security, operations, and compliance teams
Similar jobs
More roles you may want to review before you leave.AI summary
NCBA is seeking a Principal Engineer to lead cybersecurity assurance activities across production systems in Kenya. The role covers GITC auditing, vulnerability identification, RCSA documentation, security reporting, remediation support, penetration testing, and process improvement.
- Conduct GITC audits and identify security and configuration vulnerabilities
- Maintain RCSA findings, action plans, and compliance documentation
- Partner with IT, security, operations, and compliance teams
- Support penetration tests, external audits, and security improvements
- Requires at least 4 years in IT auditing and security controls
AI job guide
Use this guide to check salary signals, requirements, documents, application steps and safety before you apply.
AI salary guide
Not enough public dataNot enough public salary data is available for this exact role. Before applying, prepare to ask about gross pay, benefits, contract length, probation period, transport and any allowances.
Can you qualify for this role?
- Required4+ years of relevant experienceThe job post includes a minimum experience signal.
- RequiredEducation or certification mentioned in the postThe captured text mentions education, a diploma, certificate, or licence.
- PreferredPractical evidence in security, internship, technologyThe tags and summary point to skills connected with this role.
- RequiredAvailability to work in Rest of KenyaThe vacancy is associated with this location.
- UnclearComfort with the Full Time contract termsConfirm hours, duration, probation and benefits at the original source.
Documents to prepare
- Likely requiredUpdated CV
- Role specificCover letter or short employer message
- OptionalProfessional references
- Role specificAcademic or professional certificates
- VerifyID or passport only after verifying the employer
Application tips for this job
- Place your strongest Principal Engineer Cybersecurity Assurance evidence in the first half of your CV.
- In your cover letter or employer message, connect your experience to NCBA and the role in Rest of Kenya.
- Add concrete examples related to security, internship, technology, ideally with measurable outcomes or clear responsibilities.
- Follow the instructions from BrighterMonday Kenya; avoid sending documents to unofficial contacts or copied links.
- Confirm the deadline, interview location and employer contact before sharing personal documents.
- Prepare a polite question about pay, benefits and contract terms for later interview stages.
Source and safety check
- BrighterMonday Kenya
- Original source link available
- Application method is clear
- Deadline not specified
- No major risk signal was detected in the captured text.
Never pay for interviews, shortlisting, medical checks, uniforms, or job placement. Confirm every application at the original source before sharing personal documents. Report suspicious listing.
Interview preparation
- What experience makes you a strong fit for this Principal Engineer Cybersecurity Assurance role in security, internship?
- How have you handled responsibilities similar to those in this job post?
- Are you available to work in Rest of Kenya under the listed contract or schedule?
- Prepare examples with clear responsibilities, tools used and measurable outcomes.
- Review the source and research NCBA before the interview.
Ask what the first priorities will be in the role and how success will be measured.
Similar jobs to consider
Use AI to apply better
After confirming the original source, use Career Assistant to check role fit, tailor your CV and prepare a cover letter or employer message.
Original source description
N
Principal Engineer Cybersecurity Assurance
NCBA
Software & Data
Today
New
Rest of Kenya
Full Time
Confidential
Share link
Share on WhatsApp
Share on LinkedIn
Share on Facebook
Share on Twitter
Share via SMS
Language Requirement:
English
Work Type:
Full Time
Working Hours:
8 to 5
Applicant Location:
Kenya
Job descriptions & requirements
Key Accountabilities (Duties and Responsibilities)
Proactive GITC Auditing and Vulnerability Identification 30%
Conduct regular audits of production systems to assess GITC and identify gaps in configurations, security controls, and vulnerabilities.
Perform a thorough review of access controls, system configurations, data integrity, and compliance with internal policies and industry standards.
Identify security risks and proactively recommend appropriate remediation actions to mitigate threats.
Risk Control Self-Assessment (RCSA) Documentation 30%
Work closely with Governance and Compliance teams to document key findings in the RCSA.
For any gaps or issues that cannot be immediately resolved, ensure they are properly recorded and tracked in the RCSA, with clear action plans for resolution.
Continuously review and update the RCSA to reflect the current security and compliance posture of production systems.
Collaboration and Reporting 20%
Provide regular reports and recommendations to management and stakeholders on the status of audits, security risks, and remediation efforts.
Collaborate with internal teams such as the IT, security, and operations teams to ensure that gaps are effectively closed and issues are remediated in a timely manner.
Support ongoing compliance initiatives by providing insights into security vulnerabilities and assisting with external audits.
Support and Continuous Improvement 20%
Assist in the preparation and execution of internal penetration tests and security assessments.
Continuously assess and improve the current auditing and testing processes for efficiency and effectiveness.
Provide recommendations on tools, processes, and methodologies to enhance the security posture of production systems.
Job Specifications
Minimum of 4 years of experience in IT auditing, specifically in GITC, vulnerability assessments, and security controls within production systems.
Strong knowledge of security frameworks, regulatory standards (ISO 27001, NIST, SOC 2, GDPR), and security testing tools.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field; certifications such as CISA, CISSP, or CISM are preferred.
Experience as an IT Auditor in GITC, with expertise in auditing production systems, access controls, and the general audit lifecycle.
Strong attention to detail, communication skills, and ability to identify and resolve risks proactively.
Excellent analytical and problem-solving skills, with the ability to manage multiple audit tasks and collaborate with cross-functional teams.
Job Dimensions
Reporting Relationships: jobs that report to this position directly and indirectly
Direct Reports - None
Indirect Reports - Governance and Compliance officers
Stakeholder Management: key stakeholders that the position holder will need to liaise/work with to be successful in this role.
Internal
IT Department
Enterprise Project Management
Enterprise Risk Management
Internal Audit
External
External Auditors
Security Consultancy firms
Key Accountabilities (Duties and Responsibilities)
Proactive GITC Auditing and Vulnerability Identification 30%
Conduct regular audits of production systems to assess GITC and identify gaps in configurations, security controls, and vulnerabilities.
Perform a thorough review of access controls, system configurations, data integrity, and compliance with internal policies and industry standards.
Identify security risks and proactively recommend appropriate remediation actions to mitigate threats.
Risk Control Self-Assessment (RCSA) Documentation 30%
Work closely with Governance and Compliance teams to document key findings in the RCSA.
For any gaps or issues that cannot be immediately resolved, ensure they are properly recorded and tracked in the RCSA, with clear action plans for resolution.
Continuously review and update the RCSA to reflect the current security and compliance posture of production systems.
Collaboration and Reporting 20%
Provide regular reports and recommendations to management and stakeholders on the status of audits, security risks, and remediation efforts.
Collaborate with internal teams such as the IT, security, and operations teams to ensure that gaps are effectively closed and issues are remediated in a timely manner.
Support ongoing compliance initiatives by providing insights into security vulnerabilities and assisting with external audits.
Support and Continuous Improvement 20%
Assist in the preparation and execution of internal penetration tests and security assessments.
Continuously assess and improve the current auditing and testing processes for efficiency and effectiveness.
Provide recommendations on tools, processes, and methodologies to enhance the security posture of production systems.
Job Specifications
Minimum of 4 years of experience in IT auditing, specifically in GITC, vulnerability assessments, and security controls within production systems.
Strong knowledge of security frameworks, regulatory standards (ISO 27001, NIST, SOC 2, GDPR), and security testing tools.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field; certifications such as CISA, CISSP, or CISM are preferred.
Experience as an IT Auditor in GITC, with expertise in auditing production systems, access controls, and the general audit lifecycle.
Strong attention to detail, communication skills, and ability to identify and resolve risks proactively.
Excellent analytical and problem-solving skills, with the ability to manage multiple audit tasks and collaborate with cross-functional teams.
Job Dimensions
Reporting Relationships: jobs that report to this position directly and indirectly
Direct Reports - None
Indirect Reports - Governance and Compliance officers
Stakeholder Management: key stakeholders that the position holder will need to liaise/work with to be successful in this role.
Internal
IT Department
Enterprise Project Management
Enterprise Risk Management
Internal Audit
External
External Auditors
Security Consultancy firms
Log In and Apply
Important safety tips
Do not make any payment without confirming with the BrighterMonday Customer Support Team.
If you think this advert is not genuine, please report it via the Report Job link below.
Report Job