Manager, Information Security

Position Summary

The Manager - Information Security is responsible for Security policy development, program administration and compliance for all information security of the organization and its group companies. The job holder will also be responsible for design and implementation of a risk management and business continuity planning strategy for the organization.

Responsibility Description

Information Security and Compliance

• Guides and directs strategic policies and programs for all information security of the organization and its group companies.
• Interacts with senior leadership to ensure policies and programs are in line with business objectives and meet the requirements of the business.
• Interacts with key custodians such as system administration teams etc. to oversee dissemination of policies standards and procedures.
• Facilitates and promotes activities to foster information security awareness within the organization.
• Arranges and administers security measures to restrict unauthorized use of data systems and databases.
• Suggests and evaluates alternative/emerging technology with respect to network security.
• Responsible for compliance with respect to policies and programs for information security etc. within the organization.
• Conducts security investigations and executes preventive measures

Risk Management and Business Continuity Planning

• Responsible for the development and assessment of a risk management framework
• Plans for business continuity and disaster recovery in case of system failure and ensures data recovery plans are reviewed periodically.
• Responsible for off-site storage necessary for recovery processes and development of recovery procedures
• Manages disaster recovery functions for information systems

Responsibility Description Continue.

MIS and Reports

• Prepares timely and accurate department statements and reports to meet organization’s reporting requirements

Team Management and Resourcing

• Leads these processes effectively – sets individual objectives, recruits qualified staff, manages performance, develops and motivates staff, providing formal and informal feedback / appraisal in order to maximise subordinate and functional performance.
• Mentors’ development team and providing 'hands-on' technical leadership as required.
• Ensures all employees within the team obtain the necessary level of training.

Quality Management and Continuous Improvement

• Ensures compliance to all relevant quality management procedures and controls to guarantee compliance and delivery of high-quality products/service.
• Stimulates and contributes to the identification of opportunities for continuous improvement of systems, processes and practices taking into account best practices, improvement of business processes, cost reduction and productivity improvement

Responsibility Description Continue..

Policies, Systems, Processes and Procedures

• Ensures and recommends improvements to organizational policies, procedures and processes and implements approved departmental policies, processes, procedures and instructions.
• Understand and embrace the corporate information security framework and perform duties according to the policy, procedures, standards and guidelines

Academic/ Vocational Qualifications

• Minimum bachelor’s degree in computer science/IT/Engineering
• Certifications: CISA / CISM / CISSP

Work Experience

• Minimum 8 - 10 years of experience in a similar environment