Information Security Officer

at  iOCO

QUALIFICATIONS REQUIRED:

• Matric & relevant tertiary qualification.
• One or more of the below certifications would be advantageous:
• CISSP: Certified Information Systems Security Professional
• CISA: Certified Information Systems Auditor
• CISM: Certified Information Security Manager KPAs

SKILLS & ATTRIBUTE:

• Ability to work with and influence remote teams.
• Ability to educate a nontechnical audience about various security measures.
• Strong planning, communication (written and verbal), presentation, negotiation, and facilitation skills.
• Strong leadership and management skills.
• The ability to find innovative ways to resolve problems

THE ROLE

Our client is in search of a highly skilled and detail-oriented Information Security Officer with experience in safeguarding organizational information and systems. Expertise in developing, implementing, and managing comprehensive security programs to protect against cyber threats.

WHAT YOU’LL DO:

The candidate will be responsible for the overall planning, governance, and successful delivery of the companies Cyber Security Strategy.

• Develop and Implement Cybersecurity policies, standards, and guidelines.
• Build and manage a strong team capable of managing cyber risks and responding to day-to-day threats.
• Establish strong governance and assurance controls and processes to continuously measure and improve coverage and operatingeffectiveness of controls.Perform period risk assessments to proactively identity and mitigate cyber risks.
• Engage with business units to ensure consistent application of cybersecurity controls across all business processes, projects, andtechnology systems.
• Partner with stakeholders across business units to cultivate a strong culture of cyber security at all levels, underpinned by acomprehensive ICS training and awareness plan.
• Measure and Monitor Cybersecurity risk profile and posture and report to appropriate committees and stakeholders.
• Monitor local regulatory and technical developments to ensure that cybersecurity policies are in line with these developments and engage.
• Participate and represent cybersecurity risks in various committees and forums to provide updates and influence positive outcomes for thebusiness.
• Support audits (External and Internal) and reviews including regulatory reviews.
• Conduct Security assessment.
• Development of educational programs in security awareness.
• Educating staff about security software and best practices for information security.