Chief Information Security Officer (CISO)

Cardstel is a smartcard manufacturing and commercial printing services provider of choice. We offer a unique blend of secure printing and personalisation solutions tailored-to-fit the specific needs of our customers. Weather it be customized payment card solution with IC chips, Magstripe (HICO/LOCO), holographic embossment, UV die or Multiple Pin Recharge Card or Glossy finish Printing, our State-of-the-art equipments.

We are recruiting to fill the position below:


Job Position: Chief Information Security Officer (CISO)
Location: Lagos
Position Summary

• This is a senior leadership position responsible for establishing and maintaining a comprehensive, system-wide information security program to ensure that information assets are adequately protected.
• This includes aspects of corporate and regulatory compliance, administrative functions, risk management, as well as physical and technical security of corporate IT infrastructure and Cardstel’s backbone network systems.
• Supervisory Responsibilities (in relation to other staff): Line managing a team of two security experts.

Main Responsibilities
The majority of the work involves:

• Line managing a team of security experts, who will take responsibility for the implementation of advanced security features as well as providing support in the handling of high profile and escalated security incidents
• Overseeing and/or assisting in performing on-going security monitoring and continuous improvement of information systems including risk assessment, gap analyses, new security capabilities assessments and recommendations
• Establishing and maintaining processes to ensure that all users are trained to conduct themselves in a manner which ensures they fulfill their IT/IS security responsibilities
• Oversee regulatory compliance, establish and implement cyber security-related policies and establish and oversee the organization's security architecture

Working closely with:

• IT and software development staff to ensure that all solutions/software proposed by their teams are compliant with security policies
• Chief Network Operations Officer to ensure that all the network services are compliant with security policies
• Head of Operations to support the handling of security incidents
• Senior executives to establish disaster recovery (DR) and business continuity plan

Person Specification, Qualifications, Skills, Experience and Knowledge Required (Essential)

• Bachelor's Degree (Masters preferred) in Computer Science, Computer Information Systems, Management Information Systems, Business Administration, or other related field required
• Significant experience in a large, complex environment with primary focus of activities in information security, with at least two years in a direct, senior leadership role with information security
• Ability to lead the development/adoption and collaboratively enforce comprehensive information security policies, procedures and standards
• Broad and current understanding of security risks and controls
• Demonstrable experience of working closely with IT/IS functions to establish pragmatic/optimum security infrastructure solutions to identified risks
• Proficient in taking complex/technical subject matter and refining/presenting to the business at any level so as to result in understanding and appreciation

Personal Skills and Attributes:

• Proven experience in communicating effectively with senior management, especially when sensitive issues are involved
• Strong relationship building and collaboration skills
• Flexibility and willingness to partner with key stakeholders
• Entrepreneurial look at bringing security solutions to the community

Desirable:

• Specialization in information security or forensics preferred
• CISSP, CISM, CISA, CCSK, PCI DSS qualifications
• Working knowledge of ISO 27001, Data Protection and other regulatory environments
• ITIL V3, CobiT, COSO