Cyber Security Analyst at Jubilee Life Insurance

About Jubilee Insurance

Jubilee Insurance was established in August 1937 as the first locally incorporated insurance company based in Mombasa. It has since expanded across the region to become the largest composite insurer in East Africa, offering Life, Pensions, General, and Medical Insurance. Today, Jubilee serves over 450,000 clients and has offices in Kenya, Uganda, Tanzania, Burundi, and Mauritius.

It is the only ISO-certified insurance group listed on all three East African stock exchanges:

• Nairobi Securities Exchange (NSE)
• Dar es Salaam Stock Exchange
• Uganda Securities Exchange

The regional offices are highly rated in leadership, quality, and risk management, with ratings of AA- in Kenya and Uganda, and A+ in Tanzania.

For more information, visit: www.jubileeinsurance.com

Role Purpose

Reporting directly to the IT Manager, the Cyber Security Analyst will be responsible for identifying potential threats and vulnerabilities within operational environments. Projects may include penetration testing and simulating physical breaches to identify security gaps.

Strategy

1. Develop and implement security strategies and protocols to protect against cyber threats and data breaches.
2. Collaborate with stakeholders to assess risks and vulnerabilities, and design proactive security measures.
3. Monitor emerging security trends, technologies, and best practices to improve the organization’s security posture.

Operational

1. Monitor, detect, and respond to cybersecurity incidents and threats.
2. Conduct vulnerability assessments and security audits across systems and networks.
3. Implement and maintain endpoint, network, and cloud security controls.
4. Support security awareness and training programs.
5. Work with IT and business teams to ensure secure system design and deployment.
6. Participate in developing and enforcing cybersecurity policies, standards, and procedures.
7. Conduct risk assessments and support compliance with regulatory frameworks (ISO 27001, NIST, GDPR, or local data protection laws).
8. Provide technical input during security reviews, penetration testing, and incident post-mortems.

Corporate Governance

1. Ensure compliance with regulatory requirements, industry standards, and internal policies related to data protection and privacy.
2. Develop and maintain documentation including policies, procedures, and incident response plans.
3. Support internal teams on security-related matters and promote a culture of security awareness and compliance.

If you are qualified and seeking a new challenge, please apply by quoting the Job Title and Location to: