Lead Information Security Officer at Addosser Microfinance Bank

Responsibilities

• Responsible for safeguarding the organization’s information assets by effectively monitoring and maintaining the security of the organization's applications, databases, computers network, infrastructure and websites.
• To oversee organization-wide information technology (IT) security issues.
• Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems.
• Working with other stakeholders of the organization to ensure that the IT department and all employees follow best practices.
• Ensure data management and security policies, and introduce new technologies.
• Develop a written security risk management plan with checklists for deliverables, structure and communication between key internal and external stakeholders and enhance existing framework.
• Investigating security incidents.
• Provide leadership to the enterprise's information security organization.
• Periodic training and sensitization for all stakeholders within the organization.
• Analyzing IT security threats in real-time and mitigating these threats.
• Ensuring that newly-acquired technology complies with the IT security regulations.
• Presenting regular feedback reports on IT network security to the management and board of directors.
• Ensure that the culture, policies, structures and reporting systems are in place to allow the Information Security team to achieve the highest standards of quality, legal and regulatory compliance and corporate governance in all areas.
• Ensure that the Unit's resources and budget are managed effectively, in accordance with institutional policy and procedures, and provide best value for money.

Qualifications / Experience

• Bachelor's Degree in Computer Science or a related discipline.
• First degree in a numerate field. Postgraduate qualification such as a Master of Science in Cyber security (MSCS) will be an advantage.
• Possession of at least one globally recognized security related certification e.g. CISA. CISSP, ECSA, CHFI, ITIL amongst others.
• A minimum of 7 years’ experience in IT security or a combination of risk management, information security with leadership acumen.
• An exceptional understanding of scripting and source code programming languages, such as C#, C++, .NET, and Java will be an advantage.

Competence Requirements:

• Knowledge of information security management frameworks, such as ISO/IEC 27001
• Outstanding negotiation skills for negotiating contracts and IT support services to be rendered.
• Excellent understanding of current legislation and regulations relevant to our organization.
• Excellent project management and leadership skills.
• A track record in the management and delivery of transformational security improvements across an organization.
• Proven experience at engaging, influencing and managing stakeholders across departmental and organization.