Our client is seeking a Head of IT Security who will be responsible for safeguarding the organization's information systems within the Sub-Saharan Africa (SSA) region by developing and implementing robust security measures. This role involves ensuring compliance with security policies, managing security operations, and staying abreast of emerging security threats.
Responsibilities:
Security Strategy and Planning:
Tactical planning for the region thats aligned to the business strategy and objectives.
Implement and maintain the organization's IT security strategy and policies.
Conduct regular risk assessments and audits to identify and mitigate potential security threats.
Collaborate with senior management to align security initiatives with business objectives.
Incident Response and Management:
Lead the response to security incidents, including investigation, mitigation, and reporting.
Develop and maintain an incident response plan, ensuring the organization is prepared for potential security breaches.
Coordinate with external parties, such as law enforcement and cybersecurity experts, during significant incidents.
Security Operations:
Oversee the implementation and maintenance of security technologies, such as firewalls, intrusion detection/prevention systems, and encryption solutions.
Monitor network traffic and system logs for unusual activity, taking appropriate action to address potential threats.
Ensure the organization complies with relevant security standards and regulations, such as GDPR, ISO 27001, and PCI-DSS.
Policy Development and Enforcement:
Develop and enforce IT security policies, procedures, and guidelines to protect sensitive data and systems.
Conduct regular training sessions and awareness programs to educate employees about security best practices and protocols.
Vendor Management:
Evaluate and manage relationships with third-party vendors and service providers to ensure their security practices align with the organization's standards.
Review and negotiate security-related contracts and agreements.
Continuous Improvement:
Stay updated on the latest cybersecurity trends, threats, and technologies to continuously improve the organization's security posture.
Recommend and implement enhancements to existing security measures based on industry best practices and emerging threats.
Skills:
Excellent analytical, problem-solving, and decision-making skills.
Strong communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels.
Ability to manage multiple projects and priorities in a fast-paced environment.
Qualifications:
Bachelor's degree in Computer Science, Information Technology, or a related field.
Professional certifications such as CISSP, CISM, CEH, or equivalent are highly desirable.
Minimum of 5-7 years of experience in IT security, with at least 4 years in a managerial or leadership role.
Strong knowledge of security frameworks, standards, and best practices.
Experience with security technologies such as firewalls, IDS/IPS, SIEM, encryption, and vulnerability management tools.
