ICT Risk and Security Officer at SonySugar Limited

The Job

The job holder is responsible for implementing the ICT Security component in SonySugar within the Corporate Integrated Security Management.

Duties and responsibilities at this level will entail:

• Creating and maintaining a Corporate Integrated Security Management;
• Creating and maintaining the enterprise’s security architecture design;
• Creating and maintaining the enterprise’s Business Continuity Plan and Disaster Recovery Plan;
• Spearheading a compliance program to achieve legal obligations and business goals by prioritizing initiatives;
• Assessing the evaluation, deployment, and management of current and future technologies;
• Auditing existing compliance practices across the organization, isolating potential risks or liabilities, and developing mitigation plans;
• Developing and communicating policies, procedures, and plans to the executive team, staff, partners, customers, and stakeholders regarding information security;
• Ensuring the confidentiality, integrity, and availability of the data residing on or transmitted to/from/through enterprise workstations, servers, and other systems and in databases and other data repositories;
• Scheduling and conducting quality audit inspections, and analyzing and reviewing systems, data, and documentation;
• Identifying variations and potential high-risk areas in securing adherence to standards and procedures;
• Recommending corrective action plans and improvements in the resolution of non-compliance with standards detected through monitoring and auditing of processes and procedures;
• Staying abreast of new and current trends, technology, and developments in the ICT Security field to efficiently advise on the implementation of appropriate countermeasures;
• Effective management of communication and network security;
• Developing ICT security plans & controls that ensure that ICT security and/or availability is not compromised;
• Ensuring that the rules of use for information systems and the administrative procedures for information systems comply with SonySugar’s information security policies.

Person Specification /Requirement:

• Degree in Computer Science/Information Technology Management;
• Certified Information Systems Auditor (CISA) and Certified Information Security Manager (CISM) or ISACA Certified Information Security Manager is a MUST HAVE;
• Professional membership of high standing in any of the recognized IT Security Professional bodies;
• Certifications in ITIL, COBIT, Networks, and Database Designs shall be an added advantage;
• Five (5) years relevant experience in a busy setup;
• Fulfilled the requirements of Chapter Six (6) of the Constitution.