Applicants are hereby invited to apply for the position of Information Security Officer (Non-Management Grade 7), at our Group Information and Communications Technology Department.

Applications are to be submitted on or before September 18, 2026.

JOB SUMMARY

The incumbent will be responsible for maintaining the Group's security systems and ensuring its operations are aligned to its Information Security Policy. He/she will also be responsible for monitoring and analyzing network traffic for possible vulnerability or threat and implementation of controls to prevent exploitation. 

DUTIES AND RESPONSIBILITIES

• Monitors software that analyzes network traffic for possible vulnerabilities or threats to preserve the confidentiality, integrity and availability of the Group's data
• Reviews logs from firewalls, intrusion detection systems, network sensors, virus alerts etc. to detect any anomalies to maintain network security
• Investigates and resolves security incidents logged by external security company (Above Security) to prevent any potential exploits
• Investigates and acts upon virus alerts and suspicious traffic from external service providers (IBM, IPS) and network sensors to prevent any potential exploit
• Updates Firewall rules to deny access with website that contains malicious content to ensure malicious code or software is not introduced to the network
• Plans and participates as the technical resource on technical projects to ensure any security vulnerabilities are not introduced to the network as well as ensuring that the security policies are maintained
• Reviews network servers for compliance level to identify whether patches (security updates) are being deployed as recommended by best practices
• Performs network vulnerability scans on the Group's servers to detect if there are any possible threats to the network
• Performs Payment Card Industry (PCI) scans on the Group's servers to ensure compliance and advises management as necessary
• Reviews Change Requests/Enhancement Requests for ICT systems to ensure established policies and procedures are in accordance with ISO standards
• Provide updates for ICT's projects, Management Action Plans (MAPs), Security Governance to the CIO for decision making
• Reviews access given to production systems to prevent fraudulent and unauthorized activities on the Group's systems
• Consults on security issues within department to ensure adequate controls are implemented
• Supervises staff while ensuring their on the job training, assignment/vacation scheduling, periodic performance appraisal including coaching, mentoring, monitoring and initiating corrective action where necessary, to aid in the development of staff, as well as conducts periodic team meetings
• Engages in marketing of the Group's product and services
• Responds to customers’ requests, inquiries, incoming and outgoing calls, both local and foreign, in a courteous and timely manner consistent with operating standards and escalation to Manager where necessary
• Completes special projects and other related activities as assigned by the Supervisor/Manager

QUALIFICATIONS AND EXPERIENCE

• Candidates must possess a First Degree in Computer Science or Information Systems OR an Associate’s Degree in Information Technology AND Certified Information System Auditor (CISA) OR Certified Information Security Manager (CISM) OR Certified Information System Security Professional (CISSP) 
• Candidates must also possess a minimum of three (3) years’ experience in an Information Systems security/ auditing environment with one (1) year supervisory exposure
• Strong supervisory, conflict resolution, team building, oral and written communication skills
• Strong interpersonal and time management skills
• Strong systematical, analytical and problem solving skills
• Ability to maintain a detailed knowledge of generally available communications software, hardware, media services and facilities 
• Proficiency on Microsoft Office Suite
• Knowledge of the Group's Operating Software Systems, Products and Services