37 Data Protection jobs in Nairobi

Job Role: Information Security Engineer

Exp Required: Atleast 3+ Years of relevant work experience as Information Security engineer

Job type: Full time - Permanent

Job Location: Nairobi, Kenya

***KINDLY DO NOT APPLY IF YOU HAVE LESS THAN 3+ YEARS OF RELEVANT WORK EXPERIENCE IN INFORMATION SECURITY ENGINEER ROLE ***

***KINDLY DO NOT APPLY IF YOU ARE A NON KENYAN CITIZEN***ONLY KENYA CITIZENS WILL BE PREFERRED/CONSIDERED***

Job Summary:

Roles and responsibilities:

Security Architecture & Design

Develop, document, and maintain the enterprise security architecture, ensuring alignment with business goals and IT strategy.

Design security controlsand solutions for infrastructure, applications, networks, and cloud environments.

Evaluate new technologies and recommend secure integration into existing systems.

Implementation & Operations

Configure, deploy, and maintain securitytools (e.g., firewalls, IDS/IPS, SIEM, endpoint protection, vulnerability management).

Lead security configurations for servers, databases, applications, and network devices. Conduct regular vulnerability assessments, penetration testing, and remediation activities.

Governance, Risk, and Compliance

Assist in the development and enforcement of IT security policies, standards, and procedures.

Ensure compliance with applicable regulatory requirements (e.g., GDPR, PCI DSS, ISO 27001, Data Protection Act).

Support risk assessments and the creationof mitigation plans. Prepares the Governance, Risk, and Compliance reports

Incident Response & Monitoring

Act as a key technicallead in the detection, response, and recovery from security incidents.

Maintain and improvethe incident responseplaybook in collaboration with the outsourced CISO.

Conduct post-incident analysis to strengthen defences.

Collaboration & Reporting

Work closely with the outsourced CISO to align on security strategy and initiatives. Provide security status updates, risk assessments, and recommendations to the CIO. Partner with IT operations, development teams, and business units to embed security in all projects.

Qualifications:

• Bachelor's degreein Computer Science,Information Technology, Cybersecurity, or related field. Security certifications preferred (e.g., CISSP, CISM, CEH, CompTIA Security+, CCSP).
• Atleast 3+ years of relevant work experience as information security roles, with strong exposure to security architecture or engineering.
• Hands-on experience with security technologies (firewalls, SIEM, endpoint security, vulnerability scanners).
• Knowledge of cloud security (AWS, Azu1'e), network security, and application security best practices.
• Proven track record of working within a governance and compliance framework. Skills:
• Strong analytical, problem-solving, and troubleshooting skills. Excellent communication and documentation abilities.
• Ability to work independently and collaboratively in a hybrid oversight model.
• Technical depth in cybersecurity tools and architecture design.
• Strong understanding of IT infrastructure and software development lifecycle. Risk-based decision-making.
• Business acumen with the ability to balance security with operational needs.
• Strong communication skills
• We are looking for people who can join immediately to 30 days of notice period

Technical Skills Required: (Mandatory)

• Atleast 3+ years of relevant work experience in information security, with strong exposure to security architecture or engineering.
• Atleast 3+ Years of relevant work experience in information security roles with strong exposure to security architecture or engineering.
• Atleast 3+ Years of relevant work experience with security technologies (firewalls, SIEM, endpoint security, vulnerability scanners).
• Knowledge of cloud security (AWS, Azure), network security, and application security best practices.
• Technical depth in cybersecurity tools and architecture design.
• Strong understanding of IT infrastructure and software development lifecycle

Note:

This is a permanent full time role

Interested candidates can share your updated resume to with the below details

Name -

Tot Exp -

Rel years of wok exp as Internet Security Engineer (IT) -

Rel years of work exp in Information Security Engineering -

Rel years of work exp in Information security -

Rel years of work exp in security architecture or engineering -

Rel years of work exp in security technologies (firewalls, SIEM, endpoint security, vulnerability scanners) -

Rel years of work exp in cloud security (AWS, Azure) -

Rel years of work exp in network security -

Rel years of work exp in application security -

Rel years of work exp in cybersecurity tools -

Rel years of work exp in IT infrastructure-

Rel years of work exp in software development lifecycle -

Rel years of work exp in architecture design -

Notice period (in days) -

Current location -

Mob No -

Email id -

Current salary (in per month Kenyan Shillings) -

Expected salary ECTC (In per month Kenyan Shillings) -

Any offers on hand -

Certification if any -

Reason for leaving or job change -

Nationality -

Kenya ID No/PR ID No -

Date of Birth -

WHY INDSAFRI:

We believe anything is possible We humans have the potential to create and build anything we can imagine. we have walked the entire planet, climbed the greatest mountains, sailed once infinite oceans, inspired by birds we decided to fly, in our once impossible quest for space, now we even float in the outer space. Everything started with a simple belief that something is possible, from simple beginnings, we have come a long way, to building technology that is indistinguishable from magic. And we believe that technology is at its best when it can make people smile. If we do it with all our passion & intelligence, together nothing is impossible. How do we do it? In the future, every business will be a technology company, & the future is now. From food to finance every business is rapidly transforming & embracing cutting-edge technology at its core & good humanistic design at its heart. Indsafri can transform your business for growth, as we have done for numerous organizations big and small, by working as your trusted technology partner and bringing our deep industry experience. If you have a challenging business problem we believe there is always a solution, with the right process, talents & technology anything is possible. The Impact we create: We work with some of the Best Organizations around the world, with a distributed global network of Partners & Talents, using state-of-the-art cutting-edge Technology & High-end Human-Centered Design.

Website

• Design and implement comprehensive security architectures for on-premises, cloud, and hybrid environments.
• Develop and enforce security policies, standards, and procedures across the organization.
• Conduct security risk assessments and vulnerability analyses to identify and mitigate potential threats.
• Evaluate and recommend security technologies and solutions to enhance the organization's security posture.
• Oversee the implementation of security controls, including firewalls, IDS/IPS, SIEM, DLP, and endpoint security solutions.
• Develop incident response plans and lead the coordination of security incident management.
• Collaborate with IT and development teams to ensure secure application development practices (DevSecOps).
• Provide security guidance and mentorship to technical teams.
• Stay current with the latest cybersecurity threats, vulnerabilities, and industry best practices.
• Ensure compliance with relevant data protection regulations and standards (e.g., GDPR, ISO 27001).

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years of experience in information security or cybersecurity.
• Hands-on experience with SIEM, IDS/IPS, and EDR tools.
• Knowledge of network security, cloud security, and endpoint security.
• Understanding of common cyber threats, vulnerabilities, and attack vectors.
• Excellent analytical and problem-solving abilities.
• Strong communication and reporting skills.
• Relevant security certifications (e.g., CompTIA Security+, CEH, CISSP) are a plus.
• Ability to work independently and manage time effectively in a remote setting.
• Experience with incident response procedures.