Information Security Officer

JOB SUMMARY:
Purpose of the Role:
To lead the protection of the organisation’s Information and Communication Technology (ICT) environment against cyber-attacks by defining security strategy, identifying, and remediating potential and actual security threats, vulnerabilities, and related security weaknesses.

Duties and Responsibilities:

• Develop ICT Security Policies, Procedures and Standards and provide guidance consistent with the entity’s security requirements
• Develop and implement a Security Reference Architecture Framework and related strategies
• Conduct relevant research in Information Security Management and Technologies to keep abreast with security related trends including the country’s security regulations
• Coordinate and manage Information Security meetings and documentation and ensure issues are followed up on
• Manage and Audit Reviews regarding Information Security
• Manage seamless integration of functions with other sections and centres
• Coordinate and manage external parties engaged in the provision of services related to Information Security
• Establish a process for identifying, tracking, and reporting security incidents
• Conduct reviews of all systems to ensure that effective IT security controls consistent with policies are in place for each system
• Cooperate with the IT Management on IT security matters such as incidents, potential threats, and other concerns including regular reviews of logged security violations and related incidents
• Maintain the IT Risk Register and Security Awareness and Compliance Training Programs to ensure that ICT staff, and all employees are well informed of current and emerging security threats
• Conduct regular security assessments, vulnerability assessments; including penetration testing 

• 7 years+’ relevant working experience in ICT Security Management and Cybersecurity
• Knowledge of Cybersecurity
• Knowledge of industry best practice e.g., ITIL and COBIT, etc
• Firewall Administration Experience
• IT Security Operations
• Solid knowledge of Information Security principles and practices
• Intrusion detection and prevention systems
• Knowledge of POPI Act
• Installation, configuration, monitoring and response to security technologies
• Understanding of advanced security protocols and standards
• Software and security architecture(s)
• Knowledge of risk management principles

• Good presentation skills
• Good customer care skills
• Good communication skills
• Problem solving and analytical skills
• Time Management

• Ethical Hacking
• SACA CISA (Certified Information Security Administrator)
• ISACA CISM (Certified Information Security Manager)
• CISSP (Certified Information System Security Professional)
• ISO27001
• TOGAF
  

JOB DESCRIPTION:

NB! This job is now closed. You can apply for other jobs by uploading your CV.