Information Security Lead

ROLE SUMMARY

Ensuring the organization information assets is adequately protected against various threats.

DUTIES AND RESPONSIBILITIES

• Support the Risk & Compliance team as required to ensure that all IT security Governance and Compliance requirements are adhered to and all reporting and reviewing activities required by the Regulatory Bodies are carried out to the standards required.
•  Overseeing and managing regulatory certification i.e PCI DSS, PCI-PIN, PADSS, ISO standards and also ensuring the standards are adhered to.
• Maintain and review security controls for allocated asset(s).
• Ensure the relevant entry in the asset inventory is kept up to date.
• Responsible for carrying out awareness amongst teams to embed the management
• Management of the Antivirus console and the security event monitoring tool. 
•  Manage the penetration testing and vulnerability assessment process of ITEX infrastructure.
• Ensure that employees are aware of the relevance and importance of their activities and how they contribute to the achievement of the ISMS objectives.
• Educating colleagues on security best practices and contributing to customer communication.
• Active participation in relevant risk and compliance activities.
• Act as the point of contact with the regulatory bodies in respect of matters relating to IT security licensing and conduct of business regulation.
• Keep up to date with local regulatory developments through contact with advisors and engagement with relevant security regulatory associations.
• Keep abreast of security incidents and act as a primary control point during significant information security incidents.
• Convene a Security Incident Response Team (SIRT) as needed, or requested, in addressing and investigating security incidents that arise.
• Manage partners and third parties’ due diligence assessment
• Review and management of the fire wall and applying rules that limit and reduce exposure to attacks.
• Involvement in project and product management by ensuring vulnerability assessment is carried out on all products and projects.

REQUIREMENTS

•  Bachelor’s Degree in science/ Engineering or related fields. 
• Certifications in Information Security i.e CISA,CRISC, CISSP, ISO 27001
• Indept knowledge of nformation security policies and Information systems, threat intelligence and regulatory requirements 
• Experience usig end point security tools and Firewall rule implementations