Develop and Implement Security Policies:
Design and maintain comprehensive information security policies and procedures in line with industry best practices and organizational objectives. The Information Security Officer (ISO) is responsible for developing, implementing, and overseeing an organization’s information security strategy to ensure the confidentiality, integrity, and availability of data and IT infrastructure. The ISO identifies potential security threats, conducts risk assessments, implements security controls, and ensures compliance with applicable regulations and standards. This role works closely with cross-functional teams to ensure a secure and resilient IT environment, specifically tailored to the needs and regulatory environment of the microfinance sector in Zambia.
Ensure policies align with legal and regulatory requirements applicable to the Zambian financial sector (e.g., Bank of Zambia regulations, GDPR, ISO 27001).
Risk Management and Assessments:
Conduct regular security risk assessments and audits to identify vulnerabilities and potential threats.
Develop mitigation strategies and ensure timely remediation of security risks.
Security Monitoring and Incident Response:
Monitor security systems, networks, and applications for potential security breaches.
Lead incident response efforts, including investigation, containment, remediation, and documentation of security incidents.
Compliance and Governance:
Ensure the organization complies with security-related regulations, standards, and frameworks relevant to microfinance operations in Zambia.
Prepare and manage documentation for security audits and assessments.
Training and Awareness:
Develop and implement security awareness training programs for employees.
Foster a culture of security awareness throughout the organization.
Technology and Infrastructure Security:
Ensure secure configuration of hardware, software, and network infrastructure.
Implement security solutions such as firewalls, intrusion detection systems, encryption, and endpoint protection.
Collaboration and Reporting:
Work with IT, legal, and other departments to ensure security is embedded in all projects and processes.
Provide regular reports on security posture, incidents, and initiatives to senior management.
Education:
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Relevant certifications (e.g., CISSP, CISM, CISA, CEH) preferred.
Experience:
4-6 years of experience in information security, risk management, or a related field.
Experience in implementing security controls, policies, and incident response plans within a financial or microfinance context.
Technical Skills:
Proficiency in security tools and technologies (firewalls, SIEM, antivirus, encryption).
Understanding of security frameworks and standards (ISO 27001, NIST, GDPR, Bank of Zambia regulations).
Knowledge of networking, operating systems, and cloud security.
Soft Skills:
Strong analytical and problem-solving skills.
Excellent communication and interpersonal abilities.
Ability to work independently and collaboratively in a team environment
