J
Information Security Lead at BURN
JobSearch
Nairobi 🇰🇪 Kenya
Posted 5 days ago (15 Oct 2026) Updated 4 days ago
Job Description
The Information Security Lead will own and advance BURN’s security programme across cloud, on‑premise and IoT environments. Responsibilities include remediating assessment findings, defining security roadmaps, and establishing identity, data protection and incident‑response capabilities. The role also involves coaching a small security team and partnering with IT, NOC and engineering functions to embed security controls throughout the organization.
Qualifications & Requirements
- • Bachelor’s degree in computer science, engineering or a related field
- • 7+ years experience in information or infrastructure security, with at least 2 years leading security initiatives or teams
- • Hands‑on experience securing cloud environments, particularly AWS, including IAM, networking and logging
- • Experience with identity and access management, Microsoft Entra ID, Microsoft 365 security, MFA and privileged access
- • Proven track record running vulnerability‑management and penetration‑testing programmes and driving remediation
- • Experience leading security incident response and building SIEM or equivalent monitoring capability
- • Working knowledge of security frameworks such as ISO 27001, NIST CSF and CIS Controls, and familiarity with the Kenya Data Protection Act
- • Experience with infrastructure‑as‑code and securing CI/CD pipelines (e.g., Terraform, Ansible)
- • Desirable: experience securing manufacturing, OT or IoT environments
Required Skills
Responsibilities
- • Lead remediation of findings from external security assessments across network, web, mobile, and cloud environments, tracking closure against risk‑based timelines
- • Define and deliver the information security roadmap, policies and standards, including data classification, data loss prevention, access control and BYOD
- • Own identity and access management, including Microsoft Entra ID rollout, MFA, privileged access and periodic role‑based access reviews across ERP and internal systems
- • Secure AWS and on‑premise infrastructure, implementing IAM, network segmentation and comprehensive logging
- • Build and maintain security monitoring, incident‑response and vulnerability‑management capabilities
- • Coach a small security function and collaborate closely with IT, NOC and engineering teams