Information Security Specialist at Klasha

Klasha makes it easy for African consumers to shop online. We build technology that allows African consumers to easily access the goods they want on the continent. We enable payments online in local African currencies and can handle the last-mile logistics for our retail partners too. Statistically, Africa is the future, so we believe consumers on the continent should have the same frictionless access to the global e-commerce economy as consumers in the West.

Klasha was founded in Lagos, Nigeria in 2018 and is backed by Techstars, Ginco Investments and a group of notable angel investors. Klasha is run by 20-somethings from five nationalities that speak six different languages between them. Klasha has offices in Johannesburg, South Africa and Lagos, Nigeria.

We are recruiting to fill the position below:

Job Title: Information Security Specialist

Location: Lagos
Employment Type: Full-time

About the Role

• As the Information Security Specialist, you will be responsible for improving the security of our computer networks and databases.
• As part of our team at Klasha, your first task will be to audit our entire security system to identify weaknesses in hardware, software, or employee procedures.
• This critical role will be tasked with ensuring the security and integrity of information systems. It requires a proactive approach to safeguard sensitive data against unauthorized access, breaches, and various cyber threats.
• The specialist will be responsible for developing, implementing, and maintaining robust security protocols and systems, ensuring that all security measures are up-to-date and effective

Key Responsibilities

• Develop and Implement Security Policies: Design, develop, and enforce comprehensive security policies, protocols, and procedures that align with industry standards and organizational goals.
• Network Traffic Monitoring: Continuously monitor and analyze network traffic to detect any unusual activity, potential security incidents, and vulnerabilities that could compromise the system.
• Security Audits and Risk Assessments: Conduct regular security audits and thorough risk assessments to identify vulnerabilities and recommend appropriate mitigation strategies.
• Incident Response: Act promptly in the event of a security breach or incident, leading the investigation and remediation efforts to minimize damage and prevent recurrence.
• Manage Security Tools and Technologies: Oversee the deployment, configuration, and maintenance of security tools and technologies such as firewalls, intrusion detection systems, and antivirus software to ensure optimal performance.
• Employee Training and Guidance: Provide training sessions and ongoing guidance to employees on security best practices, creating a culture of security awareness within the organization.
• Stay Informed: Keep abreast of the latest security threats, trends, and emerging technologies by participating in professional forums, attending conferences, and pursuing continuous education.
• Compliance Management: Ensure that all security measures comply with relevant laws, regulations, and industry standards. 
• Collaboration with Engineering Team: Work closely with the Engineering department and other stakeholders to integrate security measures into the overall IT infrastructure and development processes.
• Documentation and Reporting: Maintain detailed records of security incidents, audits, and compliance efforts. Prepare regular reports for management and stakeholders to keep them informed of security status and improvements.

Qualifications

• Educational Background: A Bachelor's Degree in Information Security, Computer Science, or a related field is essential. Advanced degrees are a plus.
• Professional Certifications: Holding professional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CEH (Certified Ethical Hacker) is highly preferred.
• Experience: Proven experience in information security or a related role is required. Experience in conducting security audits, risk assessments, and incident response is crucial.
• Technical Knowledge: Strong knowledge of security protocols, principles, and standards. Familiarity with various security tools and technologies.
• Problem-Solving Skills: Excellent problem-solving and analytical skills to identify security issues and develop effective solutions.
• Teamwork and Communication: Ability to work independently and as part of a team. Strong communication and interpersonal skills to effectively collaborate with various stakeholders.
• Attention to Detail: High attention to detail and a commitment to accuracy in all aspects of security management.
• Continuous Learning: A proactive attitude towards continuous learning and professional development to stay current with the evolving security landscape.

Application Closing Date
Not Specified.