Database and IT Security Analyst at Geminia Insurance Company

DEPARTMENT: ICT

REPORTS TO: IT Manager

Branch: Head Office – Westland

PRIMARY PURPOSE:

To drive operational efficiency through the unified management and optimization of the organization’s data and security infrastructure.
To strengthen system reliability, resilience, and disaster recovery capabilities while maintaining a robust cybersecurity posture.
To ensure full compliance with the Insurance Regulatory Authority (IRA) guidelines, industry best practices, and internal governance standards.
To minimize system downtime, data loss, and vulnerability to security threats through proactive monitoring, risk mitigation, and continuous improvement initiatives.

SPECIFIC RESPONSIBILITIES:

Cybersecurity Leadership

Drive execution of the institution’s cybersecurity strategy and ensure effective implementation across departments.
Design, implement, and maintain enterprise security architecture and control mechanisms.
Develop and test the cybersecurity incident response framework.
Advise management and the board on cyber risk trends, vulnerabilities, and mitigation priorities.
Conduct vulnerability assessments and coordinate responses to incidents.
Oversee vendor cybersecurity compliance and manage third-party risk assessments.
Lead staff awareness and training initiatives to strengthen cyber hygiene.

Database Administration

Install, configure, and maintain database management systems.
Monitor database performance, optimize queries, and ensure high availability.
Perform regular backups, restores, and disaster recovery drills.
Implement database security policies and access controls.
Design and maintain schemas, indexes, and stored procedures.
Manage data replication, archiving, and purging strategies.
Provide technical support to developers and business units.
Maintain documentation of database configurations, processes, and performance metrics.

Compliance

Ensure compliance with IRA and relevant ICT security standards.
Develop and maintain ICT security and data management policies.
Support internal and external audits by providing evidence of control effectiveness.

PERSON SPECIFICATIONS

Academic Qualifications

Professional Qualification

Certification in IT security professional qualifications i.e., CISSP, CISA/CISM/CEH, CompTIA Security+, or other relevant security certifications.
Oracle Database Administration certification—Oracle Certified Professional (OCP)

Experience

At least 5 years’ experience in Security and Database administration with strong technical knowledge of database, network and operating systems security.

Required Skills and Attributes

Strong understanding of diverse security frameworks, methodologies, and processes, with hands-on experience in implementing technical security solutions such as firewalls, intrusion detection and prevention systems (IDS/IPS), and endpoint protection tools.
In-depth knowledge of TCP/IP protocols, network architecture, and network/security applications, with the ability to analyze, monitor, and troubleshoot network traffic for performance and security optimization.
Practical experience in conducting penetration testing, vulnerability assessments, and security audits, including interpreting findings and implementing effective remediation measures.
Comprehensive awareness of emerging cybersecurity threats, attack vectors, and threat intelligence sources, ensuring proactive defense and timely incident response.
High level of integrity and confidentiality.
Excellent interpersonal and communication skills.
Good analytical skills and attention to details.

Opened Career