Information Security Officer at AirtelTigo

The successful candidate for this role will join our IT Services team as an Information Security Officer (ISO) in the Information Technology Department. (S)He will report to the Chief Information Officer and will plan and execute the overall Information Security strategy for the business. The ISO will be required to recommend new or emerging IS technologies in response to organizational needs at the local level and will also be required to work with other key stakeholders to address information protection needs while maintaining the global IS program within the business.

Required Qualification and Experience

• A University degree in any field with emphasis on Telecommunications Engineer, Information Technology, Business management or a related field;
• Master’s degree is desired (in fields such as Information Systems Management, MBA);
• Information Security certification, e.g. CISSP, CISO, CISM, CISA, Cobit;
• A minimum of Six (6) years of work experience with Five (5) years in managing a technology related department;
• A minimum of Five (5) years of experience in managing Information Security programs including, but not limited to:
  • Creating and implementing Information Security policies that align with business needs and devising methods to measure the effectiveness of the policies;
  • Creating and implementing Information Security controls; - Aligning Information Security strategy with corporate governance;
  • Communicating with executive leadership
  • Managing an Information Security team
• Experience with audit reviews, IS Risk assessment, Awareness & Training, Identity Access & Management, Data Protection, Incident Management, Vulnerability Assessment, secure configurations, patches management, antivirus;
• Experience with technology infrastructure, security engineering and/or application development;
• In depth knowledge of IS Standards, e.g. ISO 27001 and of IS technologies and issues on standard platforms;
• In-depth knowledge of key government regulations and local laws to ensure that all company actions comply with these requirements; e.g., Gramm-Leach-Bliley, Sarbanes Oxley, etc;
• Understanding of wireless network technologies, transmission of data over wireless networks, understanding of data communications technologies, including routers, gateways and switches. Private network and static IP;
• Information Technology understanding across multiple platforms (windows, Unix, database engines, middleware servers, etc.) and development methodologies (internal, outsourced, software factory, etc.); • Good understanding of software architecture design (client/server, SOA, web 2.0, etc.);
• Good understanding of software development, Internet technologies and programming;
• Ability to produce accurate and timely information in a high dynamic work environment;

For full JD, view here