{"id":3906535,"url":"https://alion.io/job/ncba-group-principal-engineer-cybersecurity-assurance-2","title":"Principal Engineer Cybersecurity Assurance","company":{"id":2806203,"name":"NCBA Group","domain":"ncbagroup.com","url":"https://alion.io/company/ncbagroup","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Nairobi, Kenya"],"countries":["KE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-07T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-11-07T00:00:00Z","board_verified":false,"closed_at":null,"days_open":8,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":8},"description":"Key Accountabilities (Duties and Responsibilities)\n\nProactive GITC Auditing and Vulnerability Identification 30% \n\nConduct regular audits of production systems to assess GITC and identify gaps in configurations, security controls, and vulnerabilities. \nPerform a thorough review of access controls, system configurations, data integrity, and compliance with internal policies and industry standards. \nIdentify security risks and proactively recommend appropriate remediation actions to mitigate threats. \n\nRisk Control Self-Assessment (RCSA) Documentation 30% \n\nWork closely with Governance and Compliance teams to document key findings in the RCSA. \nFor any gaps or issues that cannot be immediately resolved, ensure they are properly recorded and tracked in the RCSA, with clear action plans for resolution. \nContinuously review and update the RCSA to reflect the current security and compliance posture of production systems. \n\nCollaboration and Reporting 20% \n\nProvide regular reports and recommendations to management and stakeholders on the status of audits, security risks, and remediation efforts. \nCollaborate with internal teams such as the IT, security, and operations teams to ensure that gaps are effectively closed and issues are remediated in a timely manner. \nSupport ongoing compliance initiatives by providing insights into security vulnerabilities and assisting with external audits. \n\nSupport and Continuous Improvement 20% \n\nAssist in the preparation and execution of internal penetration tests and security assessments. \nContinuously assess and improve the current auditing and testing processes for efficiency and effectiveness. \nProvide recommendations on tools, processes, and methodologies to enhance the security posture of production systems. \n\nJob Specifications\n\nMinimum of 4 years of experience in IT auditing, specifically in GITC, vulnerability assessments, and security controls within production systems. \nStrong knowledge of security frameworks, regulatory standards (ISO 27001, NIST, SOC 2, GDPR), and security testing tools. \nBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field; certifications such as CISA, CISSP, or CISM are preferred. \nExperience as an IT Auditor in GITC, with expertise in auditing production systems, access controls, and the general audit lifecycle. \nStrong attention to detail, communication skills, and ability to identify and resolve risks proactively. \nExcellent analytical and problem-solving skills, with the ability to manage multiple audit tasks and collaborate with cross-functional teams. \n\nJob Dimensions\n\nReporting Relationships: jobs that report to this position directly and indirectly \n\nDirect Reports - None \n\nIndirect Reports - Governance and Compliance officers \n\nStakeholder Management: key stakeholders that the position holder will need to liaise/work with to be successful in this role. \n\nInternal \n\nIT Department \nEnterprise Project Management \nEnterprise Risk Management \nInternal Audit \n\nExternal \n\nExternal Auditors \nSecurity Consultancy firms \n\n Key Accountabilities (Duties and Responsibilities)\n\nProactive GITC Auditing and Vulnerability Identification 30% \n\nConduct regular audits of production systems to assess GITC and identify gaps in configurations, security controls, and vulnerabilities. \nPerform a thorough review of access controls, system configurations, data integrity, and compliance with internal policies and industry standards. \nIdentify security risks and proactively recommend appropriate remediation actions to mitigate threats. \n\nRisk Control Self-Assessment (RCSA) Documentation 30% \n\nWork closely with Governance and Compliance teams to document key findings in the RCSA. \nFor any gaps or issues that cannot be immediately resolved, ensure they are properly recorded and tracked in the RCSA, with clear action plans for resolution. \nContinuously review and update the RCSA to reflect the current security and compliance posture of production systems. \n\nCollaboration and Reporting 20% \n\nProvide regular reports and recommendations to management and stakeholders on the status of audits, security risks, and remediation efforts. \nCollaborate with internal teams such as the IT, security, and operations teams to ensure that gaps are effectively closed and issues are remediated in a timely manner. \nSupport ongoing compliance initiatives by providing insights into security vulnerabilities and assisting with external audits. \n\nSupport and Continuous Improvement 20% \n\nAssist in the preparation and execution of internal penetration tests and security assessments. \nContinuously assess and improve the current auditing and testing processes for efficiency and effectiveness. \nProvide recommendations on tools, processes, and methodologies to enhance the security posture of production systems. \n\nJob Specifications\n\nMinimum of 4 years of experience in IT auditing, specifically in GITC, vulnerability assessments, and security controls within production systems. \nStrong knowledge of security frameworks, regulatory standards (ISO 27001, NIST, SOC 2, GDPR), and security testing tools. \nBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field; certifications such as CISA, CISSP, or CISM are preferred. \nExperience as an IT Auditor in GITC, with expertise in auditing production systems, access controls, and the general audit lifecycle. \nStrong attention to detail, communication skills, and ability to identify and resolve risks proactively. \nExcellent analytical and problem-solving skills, with the ability to manage multiple audit tasks and collaborate with cross-functional teams. \n\nJob Dimensions\n\nReporting Relationships: jobs that report to this position directly and indirectly \n\nDirect Reports - None \n\nIndirect Reports - Governance and Compliance officers \n\nStakeholder Management: key stakeholders that the position holder will need to liaise/work with to be successful in this role. \n\nInternal \n\nIT Department \nEnterprise Project Management \nEnterprise Risk Management \nInternal Audit \n\nExternal \n\nExternal Auditors \nSecurity Consultancy firms","description_format":"text","description_chars":6150,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Commercial & Retail Banks"],"lifecycle":[{"event":"open","at":"2026-11-07T03:31:30Z"}],"visa":[],"liveness":{"score":85,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":0.945,"age_days":8,"expected_fill_days":17,"reasons":["seen:8","velocity","win:mid"],"computed_at":"2026-11-15T07:52:55Z"},"pay":null,"html_url":"https://alion.io/job/ncba-group-principal-engineer-cybersecurity-assurance-2","json_url":"https://alion.io/job/ncba-group-principal-engineer-cybersecurity-assurance-2.json","meta":{"generated_at":"2026-11-15T17:29:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9687,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2806203},"rest":"https://alion.io/mcp/rest/get_company?id=2806203"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fncba-group-principal-engineer-cybersecurity-assurance-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fncba-group-principal-engineer-cybersecurity-assurance-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fncba-group-principal-engineer-cybersecurity-assurance-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ncba-group-principal-engineer-cybersecurity-assurance-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fncba-group-principal-engineer-cybersecurity-assurance-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3906535}},{"tool":"search_jobs","arguments":{"company":"ncbagroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3906535},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}