IT Security Manager at CIC Insurance

IT Security Manager at CIC Insurance

SEO Title: IT Security Manager Job at CIC Insurance – Nairobi

Meta Description: CIC Insurance is hiring an IT Security Manager in Nairobi. Apply with 7 years of IT security experience, relevant professional certification and a Bachelor’s degree.

SEO Slug: it-security-manager-cic-insurance-nairobi

IT Security Manager at CIC Insurance

Location: Nairobi, Kenya

Job Type: Full Time

Qualification: BA/BSc/HND, Professional Certificate

Experience: 7 Years

Category: ICT / Computer / Cybersecurity

Company: CIC Insurance Group Limited

Posted: August 29, 2026

Deadline: September 4, 2026

Job Overview

CIC Insurance is seeking an experienced IT Security Manager to lead and strengthen the organization's information and cybersecurity capabilities. The successful candidate will be responsible for protecting information assets, technology infrastructure, applications and digital services from cyber threats while ensuring compliance with regulatory requirements and recognized security frameworks.

The role combines strategic leadership with hands-on security management, including vulnerability management, security monitoring, incident response, cloud security, risk management and security awareness.

About CIC Insurance

CIC Insurance Group Limited is an insurance and investment group operating mainly across Kenya, Uganda, South Sudan and Malawi. The Group provides insurance and related financial services across its markets.

The IT Security Manager will support the organization's technology and business objectives by strengthening cyber resilience, managing information security risks and ensuring security controls are effectively implemented across the Group.

Key Responsibilities

Manage and continuously improve information security infrastructure and controls.

Oversee firewalls, IDS/IPS, endpoint protection, EDR, PAM, NAC and security monitoring solutions.

Manage patching, vulnerability management and security logging.

Oversee cloud security controls across AWS and Microsoft Azure environments.

Lead vulnerability assessments, penetration testing, security reviews and risk assessments.

Develop, review and implement information security policies, standards and procedures.

Ensure security policies comply with regulatory obligations and industry standards.

Develop and deliver cybersecurity and information security awareness programmes.

Conduct awareness campaigns covering phishing, social engineering, passwords, data protection and emerging threats.

Embed security-by-design principles into technology projects and initiatives.

Provide security architecture guidance for systems, applications, integrations and cloud projects.

Monitor emerging cyber threats and assess their potential business impact.

Lead cybersecurity incident detection, investigation, containment, eradication and recovery.

Coordinate post-incident reviews and improvements.

Provide cybersecurity oversight for business continuity and disaster recovery programmes.

Establish and monitor security patching and vulnerability remediation requirements.

Manage relationships with cybersecurity and technology security vendors.

Prepare information security reports and dashboards for senior management.

Qualifications and Requirements

Applicants should meet the following requirements:

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or a related field.

Relevant professional certification such as CISA, CISM, CISSP, CEH or equivalent.

Additional AWS, Azure or GCP certifications will be an advantage.

At least 7 years of hands-on IT security experience.

Minimum 2 years of team leadership experience.

Experience in the financial services industry.

Proven experience conducting penetration tests and vulnerability assessments.

Experience working with internal and external IT auditors, Risk and Compliance teams and other stakeholders.

Strong knowledge of security frameworks including ISO 27001 and NIST.

Strong understanding of IT risk management and cyber threat mitigation.

Excellent analytical and problem-solving skills.

Strong leadership and communication skills.

Ability to work effectively across cross-functional teams.

Strategic and adaptable approach to cybersecurity management.

Experience managing vendors and security-related budgets.

Key Skills

Candidates should demonstrate expertise in:

Cybersecurity

Information Security

IT Security Management

Vulnerability Management

Penetration Testing

Security Risk Management

Incident Response

Security Monitoring

Cloud Security

AWS

Microsoft Azure

ISO 27001

NIST

Cyber Threat Management

Security Architecture

Data Protection

Disaster Recovery

IT Audit

Vendor Management

Team Leadership

Who Should Apply?

This opportunity is suitable for experienced cybersecurity and IT security professionals with at least seven years of hands-on experience and a strong understanding of information security frameworks, risk management and cyber threat mitigation.

Candidates with experience in financial services, insurance, banking or other highly regulated environments will be particularly relevant. Applicants should also demonstrate leadership experience and the ability to work with IT, risk, audit, compliance and business teams.

How to Prepare Your CV

Your CV should clearly demonstrate your senior-level cybersecurity experience. Highlight experience involving:

IT security management

Cybersecurity strategy

Penetration testing

Vulnerability assessments

Incident response

Security monitoring

Cloud security

AWS and Azure

ISO 27001 and NIST

IT risk management

Security architecture

Security awareness programmes

IT audits

Cyber threat mitigation

Team leadership

Vendor management

Include relevant professional certifications such as CISA, CISM, CISSP or CEH, where applicable.

Quantify achievements where possible, such as improvements in vulnerability remediation, successful security audits, reduced security incidents or implementation of new security controls.

Salary and Work Arrangement

Salary: Not specified

Work Type: Full Time

Location: Nairobi, Kenya

Work Arrangement: Not specified

CIC Insurance has not specified the salary for this position in the advertised vacancy.

Method of Application

Interested and qualified? Go to https://careers.cicinsurancegroup.com/job/it-security-manager-3/?utm_source=MyJobMag

Application Deadline: September 4, 2026

Applicants are encouraged to submit their applications before the deadline and ensure their CV clearly demonstrates the required cybersecurity experience, qualifications and professional certifications.

Job Summary

Position: IT Security Manager

Company: CIC Insurance Group Limited

Location: Nairobi, Kenya

Job Type: Full Time

Experience: 7 Years

Qualification: Bachelor’s Degree and Relevant Professional Certification

Category: ICT / Computer / Cybersecurity

Salary: Not Specified

Posted: August 29, 2026

Deadline: September 4, 2026

Frequently Asked Questions

What is the salary for the IT Security Manager position?

The salary has not been specified in the vacancy.

Where is the IT Security Manager job located?

The position is based in Nairobi, Kenya.

How much experience is required?

Applicants require at least seven years of hands-on IT security experience, including at least two years of team leadership experience.

What qualifications are required?

Applicants should have a Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or a related field, together with a relevant professional certification.

Which cybersecurity certifications are relevant?

The vacancy mentions certifications such as CISA, CISM, CISSP and CEH. AWS, Azure and GCP certifications are an added advantage.

What are the main responsibilities?

The role covers cybersecurity infrastructure, vulnerability management, penetration testing, incident response, cloud security, security policies, risk management, security awareness and cybersecurity reporting.

What security frameworks should applicants know?

Strong knowledge of ISO 27001 and NIST is required.

What is the application deadline?

The application deadline is September 4, 2026.

Never pay money to obtain a job, interview, recruitment opportunity or employment placement.

For more job description visit: jobopenings.co.ke