🚀 Hiring at BQI Tech - Cybersecurity Consultant
We are seeking a highly experienced and self-motivated Cybersecurity Consultant to help us build on our security posture as we grow and to support the secure delivery of technology solutions in the e-government space.
We are seeking a highly experienced and self-motivated
Cybersecurity Consultant to help us build on our security posture as we grow
and to support the secure delivery of technology solutions in the e-government
space.
About the Role
As a Cybersecurity Consultant, you will:
- Conduct
security audits and risk assessments across our applications, networks,
cloud platforms and endpoints.
- Assess
cloud and infrastructure security across Microsoft Azure, Microsoft 365
and AWS, including servers, databases and identity systems.
- Review
access controls, privileged accounts, multi-factor authentication,
encryption and backup arrangements.
- Strengthen
our incident response capability through playbooks, clear escalation paths
and periodic tabletop exercises.
- Lead
investigation and root cause analysis in the event of a security incident,
drawing on logs, sign-in activity and endpoint alerts.
- Develop
and maintain security policies, procedures, risk registers and remediation
plans.
- Support
compliance with ISO/IEC 27001, the NIST Cybersecurity Framework, CIS
Controls and SOC 2, alongside GDPR and the Kenya Data Protection Act.
- Advise
development teams on secure software development, OWASP risks and
DevSecOps practice within our CI/CD pipelines.
- Deliver
cybersecurity awareness training on phishing, password security and secure
data handling.
- Provide
strategic guidance to management and support engagements with auditors,
clients, vendors and insurers.
About You
- Bachelor’s
degree in Cybersecurity, Information Technology, Computer Science or a
related field.
- 5+
years of experience in cybersecurity, information security or technology
risk.
- Demonstrable
experience in security audits, cloud and infrastructure security, and
policy development.
- Strong
working knowledge of ISO 27001, NIST and CIS Controls. Familiarity with
SOC 2, GDPR and the Kenya Data Protection Act.
- Experience
securing Microsoft Azure, Microsoft 365 or comparable cloud environments.
- Understanding
of application security, identity and access management, vulnerability
management and endpoint protection.
- Strong
analytical and report-writing skills, with the ability to advise senior
stakeholders clearly.
- Ability
to work independently and maintain confidentiality when handling sensitive
matters.
- Relevant
certifications are an added advantage. Examples include CISSP, CISM, CISA,
CEH, OSCP, GCIH and ISO 27001 Lead Implementer or Lead Auditor.
- Experience
supporting technology, government or public-sector organizations is highly
desirable.
Studies indicate that women are less likely to apply for
jobs unless they meet all the requirements. We encourage women to apply even if
you don’t meet every criterion. Your skills and perspective are valuable to us.
BQI Tech is an equal opportunity employer. All qualified
applicants will receive consideration for employment without regard to race,
color, religion, sex, sexual orientation, gender identity or national origin
and will not be discriminated against based on disability.
If you're passionate about technology that drives real-world change, we'd love
to meet you.
📍
Nairobi, Kenya (Hybrid)
📄
Independent contractor engagement
🔗
Secure Government Software &
Digital Transformation | BQI Tech
Know someone strong? Tag them below.