Head of IT Security

SUMMARY:
Our client is seeking a Head of IT Security who will be responsible for safeguarding the organizatio

POSITION INFO:

Our client is seeking a Head of IT Security who will be responsible for safeguarding the organization's information systems within the Sub-Saharan Africa (SSA) region by developing and implementing robust security measures. This role involves ensuring compliance with security policies, managing security operations, and staying abreast of emerging security threats.

Responsibilities:

Security Strategy and Planning:

• Tactical planning for the region thats aligned to the business strategy and objectives.

• Implement and maintain the organization's IT security strategy and policies.

• Conduct regular risk assessments and audits to identify and mitigate potential security threats.

• Collaborate with senior management to align security initiatives with business objectives.

Incident Response and Management:

• Lead the response to security incidents, including investigation, mitigation, and reporting.

• Develop and maintain an incident response plan, ensuring the organization is prepared for potential security breaches.

• Coordinate with external parties, such as law enforcement and cybersecurity experts, during significant incidents.

Security Operations:

• Oversee the implementation and maintenance of security technologies, such as firewalls, intrusion detection/prevention systems, and encryption solutions.

• Monitor network traffic and system logs for unusual activity, taking appropriate action to address potential threats.

• Ensure the organization complies with relevant security standards and regulations, such as GDPR, ISO 27001, and PCI-DSS.

Policy Development and Enforcement:

• Develop and enforce IT security policies, procedures, and guidelines to protect sensitive data and systems.

• Conduct regular training sessions and awareness programs to educate employees about security best practices and protocols.

Vendor Management:

• Evaluate and manage relationships with third-party vendors and service providers to ensure their security practices align with the organization’s standards.

• Review and negotiate security-related contracts and agreements.

Continuous Improvement:

• Stay updated on the latest cybersecurity trends, threats, and technologies to continuously improve the organization’s security posture.

• Recommend and implement enhancements to existing security measures based on industry best practices and emerging threats.

Skills:

• Excellent analytical, problem-solving, and decision-making skills.

• Strong communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels.

• Ability to manage multiple projects and priorities in a fast-paced environment.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.

• Professional certifications such as CISSP, CISM, CEH, or equivalent are highly desirable.

• Minimum of 5-7 years of experience in IT security, with at least 4 years in a managerial or leadership role.

• Strong knowledge of security frameworks, standards, and best practices.

• Experience with security technologies such as firewalls, IDS/IPS, SIEM, encryption, and vulnerability management tools.