Information Systems and Security Officer – Lusaka Stock Exchange at Capacity Recruitment Agency Limited

Role Requirement
We are looking for an Information systems and security officer (ISSO) who will be responsible for defining and maintaining policies and documentation for the organizational security program in order to address risks in the organization and maintaining a healthy security posture. The officer will be conducting risk assessments regularly with data owners, and reporting the effectiveness of the organization’s security controls to the IT Manager.
The ISSO will ensure that the organization IT policy is implemented and enforced with a goal of protecting the organization’s information assets, preventing unauthorized access as well as well as ensuring availability of
information and systems. The officer will define, create and maintain the documentation for certification and accreditation of each information system in accordance with the organization’s requirements. The Officer will also be able to assess the impacts on system modifications and technological advances. Additionally, the ISSO will constantly review systems in order to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes and document upgrades. The ISSO will also be responsible for administering the mobile applications run by the LuSE. This role will be reporting to IT Manager.
Principal Accountabilities

Protection of the organization from emerging security risks and implement control technologies
Planning, Implementation, operation and maintenance of the Information Security Management System(s) based on security policies and best practices
Offering internal advice and practical assistance on information security risk and control matters throughout the organization
Backups, replications and testing system restores (both primary and DRS), ensuring availability of data
Promoting the advantages of managing information security risks more efficiently and effectively.
Implementation of necessary information security policies, standards, procedures and guidelines
Discussing with user on issues such as computer data access needs, security violations, and systems security changes.
Ensure user compliance both with internal security policies etc. and applicable laws and regulations
Leading suitable information security awareness, training and educational activities with respect to information security
Documenting computer security measures, policies, procedures, and tests.
Training users on the company’s security policies and promote security awareness to ensure systems security and improve systems and network efficiency.
Monitoring and regulating systems accessibility to safeguard systems and company data.
Upgrading and / or modification of computer security files to incorporate new software, correcting errors, or changing individual access status.
Performing security risk assessments and ensure risk areas are covered / and or reduced as per the company’s security policies.
Developing plans and implementing solutions to safeguard systems data/ information against accidental or unauthorized modification, destruction, or disclosure.
Ensuring updated statuses of security systems e.g antivirus, firewalls
Ensuring data encryption of company data transmissions and storage
Reviewing violations of computer security procedures and discussing procedures with violators to ensure violations are not repeated.
Supporting the LuSE Mobile Application and other custom systems
Systems and database support
Covering for any member of department as may be assignment when necessary i.e Officer –Infrastructure officer and / or Manager – Information Technology
Any other lawful duties as assigned.

Candidate Requirements:

Education and Qualifications: Bachelor’s degree in information technology / software engineering, Computer Science, Cyber Security, Business and Information Technology field.
Experience: 3 years of experience, working in a complex IT environment
Certifications in Cyber Security, Microsoft and Cisco
Exceptional active listening and verbal and written communication skills.
Strong research, decision making, critical thinking, and problem-solving skills.
Awareness of industry trends, technology, and developments.

Sharing is Caring! Click on the Icons Below and Share